Cyber Security Engineer (Application Security)

About the Client

The organization provides behavioral health practice management and EHR software designed to streamline scheduling, billing, documentation, and telehealth for clinicians. It addresses the challenge of managing administrative tasks in behavioral health practices, enabling clinicians to focus on patient care.

About the Opportunity

The Cyber Security Engineer (Application Security) is responsible for securing the software development lifecycle and continuous integration/deployment pipelines. This role enhances application security, reduces vulnerabilities, and ensures compliance with healthcare regulations, contributing to the protection of sensitive health data.

Responsibilities

• Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline.
• Enforce secure coding standards to protect data confidentiality, integrity, and availability.
• Conduct security assessments, code reviews, and threat modeling.
• Manage and operate GitHub Advanced Security tools for code and dependency scanning.
• Secure CI/CD pipelines, GitHub Actions, and mitigate software supply chain risks.
• Review infrastructure-as-code for security misconfigurations.
• Ensure compliance with HIPAA, HITRUST, and HITECH standards.
• Assist developers in vulnerability remediation.
• Develop and manage security testing tools and automation.
• Support incident response activities related to application security.
• Promote security awareness and best practices among development teams.

Requirements

• Bachelor's degree in information security, computer science, or related field preferred.
• Minimum 5 years of experience in application security or security engineering.
• Proven experience securing CI/CD pipelines and GitHub Actions including SAST/DAST and dependency scanning.
• Familiarity with Terraform or similar infrastructure-as-code security reviews.
• Knowledge of SIEM, EDR/XDR, and DLP platforms.
• Understanding of Zero Trust principles for application and identity access.
• Strong knowledge of healthcare security regulations (HIPAA, HITECH, HITRUST).
• Experience with API security and healthcare data standards such as HL7.
• Prior experience securing cloud environments, preferably Azure.
• Willingness to participate in incident response on‑call rotation.
• Relevant industry certifications are advantageous but not a substitute for hands‑on experience.

Pay

Competitive salary range: $110,000‑$150,000

Benefits

• Employer‑sponsored health, dental, vision, life, and disability insurance
• Retirement plan with company contribution
• Annual company profit sharing
• Personal development and training budget
• Open and collaborative work environment
• Extensive onboarding and mentorship programs

Equal Opportunity

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.