Senior Security Engineer - Secure Healthcare APIs

NexHealth; San Francisco (CA); On-site; USD 165,000 - 230,000; Full time

Benefits offered by this job

Full Medical, Dental, and Vision (up to 100% covered)

401K and commuter benefits

Flexible PTO

Job summary

NexHealth in San Francisco is seeking a Senior Software Engineer, Security to own application security across their product platform. This hands-on role will involve designing secure systems, leading threat modeling, and integrating security tooling into CI/CD pipelines. Candidates should have 5+ years of software engineering experience, including 1-3 years focused on security, and be familiar with cloud environments like AWS. The compensation range is $165,000—$230,000, along with benefits like full medical coverage and unlimited PTO.

Qualifications

• 5+ years of software engineering experience, with 1–3+ years focused on application or product security.
• Hands‑on experience securing APIs and implementing authentication/authorization systems (OAuth 2.0, JWT, RBAC).
• Familiarity with security tooling: SAST, DAST, dependency scanning.

Responsibilities

• Design and build secure systems across our APIs, EHR integrations, payments infrastructure, and SaaS products.
• Lead threat modeling and security design reviews for new features.
• Identify and remediate vulnerabilities in application code, dependencies, and infrastructure.

Skills

Application security

Backend systems in Python, Go, Java

Common vulnerabilities and mitigations

Securing APIs

Cloud environments (AWS, Google Cloud)

Education

Bachelor's degree in Computer Science, Engineering, or equivalent

Tools

SAST

DAST

Dependency scanning

Job description

NexHealth in San Francisco is seeking a Senior Software Engineer, Security to own application security across their product platform. This hands-on role will involve designing secure systems, leading threat modeling, and integrating security tooling into CI/CD pipelines. Candidates should have 5+ years of software engineering experience, including 1-3 years focused on security, and be familiar with cloud environments like AWS. The compensation range is $165,000—$230,000, along with benefits like full medical coverage and unlimited PTO.