Cyber Security Engineer – Application Security

TherapyNotes, LLC

. Integrate security continuously into the SDLC and CI/CD pipeline in collaboration with development teams .

Posted 11/3/2026full-timeRemote • Pennsylvania • United StatesMid-LevelSenior💰 $110,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in integrating security into the SDLC and CI/CD pipeline, with a strong focus on secure coding practices and vulnerability management. Proficient in application security measures aligned with HIPAA, HITRUST, and HITECH standards, while effectively collaborating with development teams to remediate vulnerabilities.

Highest-signal resume keywords

Application SecurityCI/CD Pipeline SecurityGitHub Actions SecurityVulnerability ManagementInfrastructure-as-Code Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Coding StandardsSASTDASTThreat ModelingCode ReviewsVulnerability AssessmentsAPI SecurityTerraform Security ReviewZero Trust ArchitectureIncident Response

Tools & Technologies

GitHub Advanced SecuritySIEMEDR/XDRDLP PlatformsAzure Cloud SecurityAWS Cloud Security

Certifications & Qualifications

GWAPTOSWEGPENAzure Cloud Security CertificationAWS Cloud Security CertificationCISSPHCISPP

Industry Keywords

HIPAAHITECHHITRUSTHealthcare Data StandardsHL7

Tech Stack

Tools & technologies

AWSAzureCloudSDLCTerraform

About the role

Key responsibilities & impact

Integrate security continuously into the SDLC and CI/CD pipeline in collaboration with development teams
Enforce secure coding standards and best practices to protect customer data confidentiality, integrity, and availability
Perform security assessments, code reviews, and threat modeling
Own and operate GitHub Advanced Security, triaging code, secret, and dependency-scanning findings
Identify recurring vulnerability patterns and improve scanning coverage, configuration, and workflows
Secure GitHub Actions, including identities, runners, permissions, and secrets
Reduce software supply-chain risk through third-party action review, dependency controls, action pinning, and artifact provenance
Review Terraform and other infrastructure-as-code for security issues
Partner with IT platform teams on IaC scanning and secure deployment practices
Align application security measures with HIPAA, HITRUST, and HITECH and support regular audits
Collaborate with developers to remediate vulnerabilities and ensure patching or mitigation
Develop, deploy, and manage SAST, DAST, and vulnerability-management tools
Support application security incident response, root-cause analysis, and resolution strategies
Contribute to secure-coding awareness programs for development teams

Requirements

What you’ll need

Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered
5+ years in application security or security engineering
Demonstrated experience securing CI/CD pipelines and GitHub Actions, including SAST/DAST, code/secret/dependency-scanning triage, runner and workflow-permission security, and third-party action/supply-chain risk
Experience reviewing Terraform or other infrastructure-as-code for security misconfigurations
Working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert triage
Understanding of Zero Trust architecture principles and application to application and identity access
Strong understanding of HIPAA, HITECH, and HITRUST and their impact on application security
Experience with API security, particularly integrations with other healthcare systems
Azure cloud security experience preferred; AWS a plus
Willingness to participate in an incident response on-call rotation
Industry certifications such as GWAPT, OSWE, GPEN, or Azure/AWS cloud security certification ideal; CISSP or HCISPP a plus
Familiarity with HL7 or other healthcare data standards preferred

Benefits

Comp & perks

Employer sponsored health, dental, vision, life, and disability insurance
Retirement plan with company contribution
Annual company profit sharing
Personal development/training budget
Open, collaborative work environment
Extensive 2-week onboarding plan
Comprehensive mentorship program