Product Security Engineer

Modern Health

. Analyze security vulnerabilities in web and mobile applications, determine risk levels, and drive remediations with engineering teams .

Posted 9/18/2026full-timeRemote • United StatesJunior💰 $101,405 - $140,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in secure software development practices, vulnerability management, and application security tools, with a strong ability to collaborate across teams to integrate security into the software development lifecycle. Proficient in assessing and improving cloud security posture, particularly within AWS environments.

Highest-signal resume keywords

Secure Software Development PracticesVulnerability ManagementAWS Cloud SecuritySecure Code ReviewThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementSecure Code ReviewThreat ModelingScripting Language (Python/Bash)Application Security Tools

Soft Skills

Excellent Written CommunicationExcellent Verbal CommunicationCollaborative Work StyleProject Execution

Tools & Technologies

AWSGitLab CI/CDTerraformPostgreSQLRedisDatadogSentryPackerSASTDAST

Industry Keywords

Health TechProduct SecurityApplication SecurityCloud InfrastructureAgile Product Delivery

Tech Stack

Tools & technologies

AWSCloudPackerPostgresPythonRedisSDLCTerraformVault

About the role

Key responsibilities & impact

Analyze security vulnerabilities in web and mobile applications, determine risk levels, and drive remediations with engineering teams
Research and report on potential product threats, emerging vulnerabilities, and mitigation techniques in health tech
Partner with Engineering and Product to integrate security throughout the SDLC and champion secure development practices
Develop and advocate cost-effective solutions for application and product security challenges
Implement product security standards and best practices across the organization, influencing engineering and architecture decisions
Test, audit, and assess application and cloud infrastructure security posture
Guide engineering teams on secure coding standards and provide actionable security feedback
Deploy, optimize, and manage SAST, DAST, HashiCorp Vault, and other application security tooling
Participate in threat modeling for new features and evolving services
Conduct secure code reviews on services and applications
Assist with targeted penetration tests before production release
Collaborate on IT security initiatives covering device management, endpoint protection, access management, and IT hygiene
Partner with DevOps and Infrastructure on cloud architecture, security policies, and cloud-native controls
Report to the Head of Security as part of the Product Security team

Requirements

What you’ll need

Deep familiarity with secure software development practices, security-focused architecture, and infrastructure aligned with product objectives and business needs
Hands-on experience with vulnerability management, secure code review, threat modeling, and industry-standard application and product security tools
Hands-on experience with at least one scripting language; Python and/or Bash preferred
Ability to work collaboratively with developers, product managers, and cross-functional stakeholders to secure web and mobile applications
Ability to assess, prioritize, and execute projects independently
Excellent written and verbal communication skills
2–4 years of experience in product/application security or 1–3 years in security-focused software engineering
Experience integrating security into agile product delivery
Experience reviewing code changes with software engineers and providing security feedback
Experience building or applying security controls for AI systems and using AI to improve security engineering workflows
Experience assessing and improving AWS cloud posture through IAM and access reviews, network and environment segmentation, vulnerability management, centralized logging, detection, and secure CI/CD or Terraform controls
Applicants must be able to maintain work authorization for the duration of employment without employer sponsorship or employer-provided training plans or attestations
Experience with AWS, GitLab CI/CD, Python, PostgreSQL, Redis, Datadog, Sentry, Terraform, and Packer
Bonus: experience at a high-growth startup, with SaaS software, in Health Tech, or in software engineering

Benefits

Comp & perks

Medical / Dental / Vision / Disability / Life Insurance
High Deductible Health Plan with Health Savings Account (HSA) option
Flexible Spending Account (FSA)
Access to coaches and therapists through Modern Health's platform
Flexible Time Off
Company-wide Collective Pause Days
Parental Leave Policy
Family Forming Benefit through Carrot
Family Assistance Benefit through UrbanSitter
Professional Development Stipend
401k
Financial Planning Benefit through Origin
Annual Wellness Stipend to use on items that promote your overall well being
New Hire Stipend to help cover work-from-home setup costs
ModSquad Community: Virtual events like active ERGs, holiday themed activities, team-building events and more
Monthly Cell Phone Reimbursement
Full-time employees are eligible for Modern Health's equity program