Senior Security Engineer – Application Security

K Health

. Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC) .

Posted 10/13/2026full-timeRemote • United StatesSenior💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security throughout the Software Development Lifecycle (SDLC), with a strong focus on integrating security into architecture, design, and development processes. Proficient in evaluating security tools, conducting hands-on testing, and ensuring compliance with healthcare regulations such as HIPAA and GDPR.

Highest-signal resume keywords

Application SecuritySecurity TestingCI/CD IntegrationCloud Technology (AWS, GCP, Azure)OWASP Top 10

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application Security VulnerabilitiesManual Security TestingStatic Application Security TestingDynamic TestingSecure API DesignCryptographySecrets ManagementInfrastructure-as-Code ScanningAuthenticationAuthorization

Tools & Technologies

DatadogSumologicTorqFlare.ioGCPEntitleOktaOrcaGitLabPrisma

Industry Keywords

Healthcare ComplianceHIPAAGDPRVulnerability ManagementSecurity Incidents

Tech Stack

Tools & technologies

AWSAzureCloudDistributed SystemsGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC)
Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment
Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure
Build and improve automated security testing within CI/CD pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing
Evaluate application security tools, improve tooling output quality and reduce unnecessary findings and developer friction
Develop secure coding standards with developer-focused documentation
Contribute application security expertise to vulnerability management, security incidents/investigations and post-incident reviews
Evaluate third party applications, libraries, APIs and integrations for security risk
Ensure adherence to relevant healthcare regulatory and compliance requirements, including HIPAA and GDPR, across all product lines and systems
Explore, partner on and implement bleeding-edge technology

Requirements

What you’ll need

4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security
Strong understanding of application security vulnerabilities and attack techniques, including OWASP Top 10 and API security risks
Experience performing manual security testing of modern web applications, APIs and distributed systems
Ability to review application architecture and source code for security weaknesses
Experience integrating application security tools into modern CI/CD workflows
Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning
Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design
Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities
Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines
Experience with specific tools and tech K uses, including Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, GitLab, and Prisma is a bonus

Benefits

Comp & perks

Monthly social committees for company events
18 vacation days, 9 company holidays, 5 sick days, and 2 personal days
Stock options for every full-time employee
Paid parental leave
401k benefit
Commuter Benefits
Competitive health, dental, and vision insurance options