Senior Application Security Engineer
Company Description
Emergency room visits and hospital stays can be uncomfortable and stressful times for families and their loved ones. DispatchHealth allows people to receive high quality and cost-effective medical care in the comfort of their homes. A rapidly scaling startup, DispatchHealth provides an integrated, convenient, high-touch care-delivery solution that extends the capabilities of the patient's care team and ensures that we provide personalized, quality care in the home or at the patient’s location of need.
Technology and data drive all aspects of our business and allow for better care delivery from patient onboarding, patient care, and post care follow-up. We’re looking to create a best-in-class technology platform that helps our patients stay in the comfort of their homes – and we’re looking for people like you to help shape and build the technology that changes the way people receive healthcare.
Location: Remote
Position Summary
A senior application security engineer at DispatchHealth will be responsible for the security of our codebase and the tools that support it. This position involves all of the traditional aspects of application security including vulnerability management, design/code reviews, and secure coding consultation. This role will also serve a leadership purpose. This position is intended for candidates that are comfortable leading projects, mentoring junior members of the team, and working with the development organization to keep DispatchHealth secure.
Responsibilities
A senior application security engineer at DispatchHealth will be responsible for the following:
- Supporting, maintaining, and implementing vulnerability scanners
- Managing the vulnerability lifecycle for our products
- Performing security reviews for new features and products
- Supporting our development colleagues with consultation on secure coding best practices
- Designing and overseeing the implementation of large-scale application security initiatives
- Training and mentorship of security analysts
- Ensuring proper implementation of security controls related to PCI, HIPAA, and HITRUST
Qualifications
- 5+ years of experience in application security
- Deep understanding of SAST, DAST, and SCA tooling
- Experience implementing a vulnerability management program
- Experience with performing architecture and design reviews
- Experience with threat modeling (STRIDE, DREAD, etc.)
- Experience in AWS, Azure, or GCP security best practices
- Good automation skills with Python, Ruby, or other scripting languages
- Ability to perform manual vulnerability assessments on web properties
Nice to Haves
- Experience with HIPAA
- Experience with PCI
- Experience with HITRUST
- Web Application Firewall (WAF) experience
- Experience with running or participating in bug bounty programs
The pay range for this position in Colorado is $165,000 - $195,000/yr; however, base pay offered may vary depending on job-related knowledge, skills, candidate location, and experience. This role can be located anywhere in the US.
DispatchHealth is committed to creating and supporting a diverse and inclusive team and serving all communities. All qualified applicants will be considered for employment regardless of race, gender, gender identity or expression, sexual orientation, religion, national origin, disability, age or veteran status.
DispatchHealth offers a comprehensive benefit package, including medical, dental and vision insurance, 401k, paid time off, family and short-term disability leave.
To see our Employee Privacy Notice, please see here: https://www.dispatchhealth.com/employee-privacy-notice/