Application Security Engineer
Strive Health · United States
About the role
Builds application security into Strive Health's product development, supporting the Canvas Medical deployment, patient-facing experiences and future mobile apps as the main security partner for Product and Engineering. The engineer runs threat modelling and architecture reviews, operates SAST, DAST, SCA and container scanning, performs manual testing with tools such as Burp Suite, manages vulnerability remediation, and coordinates external penetration tests.
The company wants a bachelor's degree, three or more years in information security focused on application security or DevSecOps (five for a senior hire), CI/CD tool integration experience and manual testing skills. Healthcare experience with PHI and HITRUST is preferred. Travel and on-site work may be needed.