Cyber Security Engineer (Application Security)

About Our Client:
The organization operates in the behavioral health software industry, providing practice management and electronic health record (EHR) solutions aimed at streamlining scheduling, billing, documentation, and telehealth services for clinicians. It addresses challenges in managing behavioral health practices by offering comprehensive software designed to improve patient care efficiency.
About the Opportunity:
The CYBER SECURITY ENGINEER (APPLICATION SECURITY) role focuses on securing applications throughout the software development lifecycle and continuous integration/continuous deployment pipeline. This position plays a critical role in protecting sensitive healthcare data by enhancing application security measures, managing vulnerabilities, and supporting incident response within a regulated healthcare environment.
Responsibilities:
Manage application security integration across SDLC and CI/CD pipelines.
Enforce secure coding standards to protect data confidentiality, integrity, and availability.
Conduct security assessments, code reviews, and threat modeling to identify vulnerabilities.
Operate and improve GitHub Advanced Security tools, including triaging scanning findings.
Secure CI/CD pipelines and reduce supply chain risks through third-party action review.
Review infrastructure-as-code for security misconfigurations and collaborate on secure deployment.
Ensure compliance with healthcare security regulations and support audits.
Collaborate with developers to remediate vulnerabilities effectively.
Deploy and manage security tools to automate testing and scanning.
Participate in application security incident response activities.
Contribute to security awareness and training programs for development teams.
Requirements:
Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered.
Minimum 5 years of experience in application security or security engineering.
Proven expertise securing CI/CD pipelines and GitHub Actions, including SAST/DAST and scanning workflows.
Experience reviewing Terraform or infrastructure-as-code for security issues.
Knowledge of SIEM, EDR/XDR, and DLP platforms.
Understanding of Zero Trust architecture principles.
Strong knowledge of healthcare security regulations such as HIPAA, HITECH, and HITRUST.
Experience with API security and familiarity with healthcare data standards preferred.
Prior cloud security experience, preferably Azure; AWS is a plus.
Willingness to participate in on-call incident response rotations.
Relevant industry certifications are desirable but not substitutes for hands-on experience.
Pay Range and Compensation Package:
Competitive salary range of $110,000 to $150,000.
Benefits & Perks:
Employer-sponsored health, dental, vision, life, and disability insurance.
Retirement plan with company contribution.
Annual company profit sharing.
Personal development and training budget.
Comprehensive onboarding and mentorship programs.
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes