Senior Cyber Security Engineer (Application Security) - Fully Remote

This is a Fully Remote Job

1. About Our Client:

The organization provides behavioral health Practice Management and EHR software designed to streamline scheduling, billing, documentation, and telehealth for clinicians. It addresses the challenge of managing administrative tasks in behavioral health practices, enabling clinicians to focus on patient care.

2. About the Opportunity:

The Cyber Security Engineer (Application Security) is responsible for securing the software development lifecycle and continuous integration/deployment pipelines. This role enhances application security, reduces vulnerabilities, and ensures compliance with healthcare regulations, contributing to the protection of sensitive health data.

3. Responsibilities:

• Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline.
• Enforce secure coding standards to protect data confidentiality, integrity, and availability.
• Conduct security assessments, code reviews, and threat modeling.
• Manage and operate GitHub Advanced Security tools for code and dependency scanning.
• Secure CI/CD pipelines, GitHub Actions, and mitigate software supply chain risks.
• Review infrastructure-as-code for security misconfigurations.
• Ensure compliance with HIPAA, HITRUST, and HITECH standards.
• Assist developers in vulnerability remediation.
• Develop and manage security testing tools and automation.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Support incident response activities related to application security.
• Promote security awareness and best practices among development teams.

4. Requirements:

• Bachelor''s degree in information security, computer science, or related field preferred.
• Minimum 5 years of experience in application security or security engineering.
• Proven experience securing CI/CD pipelines and GitHub Actions including SAST/DAST and dependency scanning.
• Familiarity with Terraform or similar infrastructure-as-code security reviews.
• Knowledge of SIEM, EDR/XDR, and DLP platforms.
• Understanding of Zero Trust principles for application and identity access.
• Strong knowledge of healthcare security regulations (HIPAA, HITECH, HITRUST).
• Experience with API security and healthcare data standards such as HL7.
• Prior experience securing cloud environments, preferably Azure.
• Willingness to participate in incident response on-call rotation.
• Relevant industry certifications are advantageous but not a substitute for hands-on experience.

5. Pay Range and Compensation Package:

• Competitive salary range: $110,000-$150,000

6. Benefits & Perks:

• Employer-sponsored health, dental, vision, life, and disability insurance
• Retirement plan with company contribution
• Annual company profit sharing
• Personal development and training budget
• Open and collaborative work environment
• Extensive onboarding and mentorship programs

Equal Opportunity Statement:

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.