Senior Application Security Analyst

Company Description eClinicalWorks is a privately held leader in healthcare IT, offering comprehensive Electronic Health Record (EHR) and Practice Management (PM) solutions to over 850,000 medical professionals in more than 20 countries. The organization focuses on innovative, customizable tools that support documentation, Population Health, Patient Engagement, and Revenue Cycle Management. By prioritizing client needs and leveraging advanced technology, eClinicalWorks helps healthcare providers improve quality of care, reduce operational costs, and meet evolving regulatory requirements. Team members contribute to products that directly impact clinical workflows and patient outcomes, working in a dynamic environment that values continuous improvement and collaboration.
Role Description The Senior Application Security Analyst is a full-time, on-site role based in the Greater Bengaluru Area. This role is responsible for assessing, improving, and monitoring the security of applications across the eClinicalWorks product portfolio. Day-to-day activities include performing application security testing, reviewing code and designs for vulnerabilities, collaborating with development and DevOps teams to implement secure coding practices, and supporting threat modeling and risk assessments. The analyst will help define and refine security standards, respond to security incidents related to applications, and contribute to security awareness and training initiatives. The position requires close partnership with cross-functional stakeholders to ensure that security controls are integrated throughout the software development lifecycle and aligned with healthcare industry regulations and best practices.
Qualifications
Strong knowledge of application security principles, including secure software development lifecycle (SDLC), threat modeling, and vulnerability management.
Hands-on experience with application security testing tools and techniques (e.g., SAST, DAST, dependency scanning, penetration testing for web and mobile applications).
Proficiency in one or more modern programming or scripting languages (such as Java, C#, JavaScript, Python) and ability to review code for security flaws.
Familiarity with common security standards and frameworks (e.g., OWASP Top 10, NIST, ISO 27001) and regulatory requirements applicable to healthcare technology.
Experience working with cloud or distributed architectures and securing APIs, microservices, and integrations.
Excellent analytical, problem-solving, and communication skills, with the ability to explain complex security issues to technical and non-technical stakeholders.
Demonstrated ability to lead or mentor on security best practices and collaborate effectively with development, QA, and operations teams.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; relevant security certifications (such as CISSP, CISM, CEH, or CSSLP) are preferred.
Prior experience in a senior or lead application security role, ideally within a SaaS or healthcare IT environment, is

Work arrangement
No