Senior Security Engineer

PathAI

. Champion secure coding practices across Python and JavaScript codebases through design reviews, threat modeling, and code review .

Posted 11/6/2026full-timeBoston • Massachusetts • United StatesSenior💰 $127,500 - $195,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in secure coding practices, application security engineering, and the integration of security tooling within CI/CD pipelines. Proficient in collaborating across teams to enhance platform security and compliance in regulated environments.

Highest-signal resume keywords

Secure Coding PracticesApplication Security EngineeringCI/CD IntegrationAWS Cloud Platform ExperienceCybersecurity Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonJavaScriptSASTDASTSCASecrets ScanningContainer ScanningThreat ModelingVulnerability ManagementIaC Security Scanning

Soft Skills

Problem-SolvingInterpersonal SkillsCommunication SkillsCollaborationOrganizational Skills

Tools & Technologies

GitLabAWS GuardDutyJiraDockerKubernetesGitLab CITerraformPolicy-as-CodeCSPMLogging and Monitoring

Certifications & Qualifications

OSCPGWAPTCSSLPCISSP

Industry Keywords

FDA-Regulated Medical Device SoftwareIEC 62304ISO 13485ISO 27001NISTSOC 2HIPAAHL7HL7 FHIRDICOM

Tech Stack

Tools & technologies

AWSCloudCyber SecurityDockerJavaScriptKubernetesPythonSDLCTerraform

About the role

Key responsibilities & impact

Champion secure coding practices across Python and JavaScript codebases through design reviews, threat modeling, and code review
Design and build internal tools, automation, and paved-road patterns such as secure libraries, CI/CD guardrails, pre-commit checks, and self-service workflows
Own and continuously improve SDLC security tooling, including SAST, DAST, SCA/dependency scanning, secrets detection, container scanning, and IaC scanning
Tune security tooling to maximize signal and minimize noise
Streamline cybersecurity issue triage, tracking, and remediation; integrate actionable findings into GitLab, Orca, AWS GuardDuty, Jira, and Bugbounty
Collaborate with product, infrastructure, machine learning, and IT teams to secure the AWS and Kubernetes cloud-native SaaS platform
Drive engineering standards and ensure security controls are reviewed, tested, and integrated
Mentor teammates, deliver secure coding guidance and training, and share technical knowledge
Contribute to platform reliability, data integrity, sensitive health data protection, and industry-standard compliance
Collaborate with clinical, QA, and regulatory teams to meet validation expectations and support audits and inspection readiness

Requirements

What you’ll need

BS in Computer Science, Software Engineering, Cybersecurity or closely related technical field
5+ years of full life cycle development and/or application security engineering experience
Strong, hands-on understanding of secure coding practices and common vulnerability classes, including OWASP Top 10 and CWE
Demonstrated experience building tools and automation that improve developer workflows, ideally in Python
Demonstrated experience integrating SAST, DAST, SCA, secrets scanning, and container scanning into CI/CD pipelines
Ability to take on complex tasks, learn quickly, and work proactively
Ability to collaborate with a distributed team and work autonomously on projects
Problem-solving skills and ability to work in a fast-paced, agile environment
Strong interpersonal and communication skills, including ability to attend client-facing meetings and explain technical concepts to non-experts
Demonstrated cloud platform experience with AWS
Preferred: experience managing cybersecurity and risk in controlled or regulated environments, such as FDA-regulated medical device software, IEC 62304, ISO 13485, ISO 27001, NIST, SOC 2, or HIPAA
Preferred: advanced degree or relevant security certification such as OSCP, GWAPT, CSSLP, or CISSP
Preferred: healthtech industry experience, including HL7, HL7 FHIR, or DICOM
Preferred: threat modeling, vulnerability management programs, and risk-based prioritization experience
Preferred: hands-on experience with CI/CD tools such as GitLab CI
Preferred: knowledge of Docker, Kubernetes, and securing containerization/orchestration environments
Preferred: knowledge of IaC frameworks such as Terraform and policy-as-code or IaC security scanning
Preferred: cloud security tooling and practices, including IAM, network segmentation, logging and monitoring, and CSPM
Preferred: organizational skills and ability to prioritize and manage multiple projects efficiently

Benefits

Comp & perks

Remote or hybrid work options
Relocation benefits are not available for this position