Application Security Engineer, Zocdoc
$100-140k
API connecting patients to doctors
Be an early applicant
API connecting patients to doctors
1001+ employees
Be an early applicant
$100-140k
1001+ employees
Company mission
To give power to the patient by delivering the accessible, seamless, and simple experience patients expect and deserve.
Role
Who you are
- Meaningful experience in an information security role, software engineering position, or IT audit function with an application security focus
- A foundational understanding of software development processes and how security fits into agile environments
- Familiarity with code review concepts and comfort reading at least one major language used in cloud environments, such as Python, JavaScript, Go, or Java
- Basic exposure to cloud environments such as AWS, GCP, or Azure, along with an understanding of Git workflows
- A conceptual understanding of vulnerability categories and web application security standards
- An interest in emerging technology trends, especially AI security risks and automated workflows
- Required: the ability to integrate generative AI tools into daily workflows to automate tasks, foster innovation, and maximize productivity
- A degree in Computer Science, Cybersecurity, or a related technical field is preferred, though equivalent hands-on experience or certifications such as Security+, GSEC, or CEH are also highly valued
- Superb communication skills, humility, and a collaborative approach to supporting stakeholders across engineering and security
What the job involves
- Zocdoc’s most important asset is our people. As an Application Security Engineer, you’ll play a meaningful role in helping our development organization build secure software with confidence. In this role, you’ll work closely with our Compliance, Security, and Engineering teams to support our secure software development lifecycle, strengthen application security governance, and help shape emerging AI governance guardrails across the business
- Personally motivated by helping teams build secure software and reduce risk before issues reach production
- Autonomous, urgent, and creative. You genuinely love turning security requirements into practical guidance for developers
- Highly collaborative and energized by partnering with engineering squads across the software development lifecycle
- Passionate about application security, secure coding, and improving how teams work within modern development environments
- A clear communicator who can make security concepts approachable and actionable for technical partners
- The kind of person who is excited by emerging technology trends, especially AI security risks and automated workflows
- Serious about your work, but not about yourself
- Serving as an accessible point of contact for engineering squads, helping teams understand and follow secure development lifecycle guidelines
- Assisting developers in reviewing and interpreting alerts from static analysis and software composition analysis tools, including helping distinguish true vulnerabilities from false positives
- Providing clear, actionable guidance on remediating common application security vulnerabilities, including issues aligned to the OWASP Top 10
- Helping maintain internal security documentation, developer playbooks, and secure coding training materials so that compliance expectations are clear and achievable
- Supporting application security governance by tracking key security milestones and organizing technical evidence from repositories and deployment pipelines for compliance audits
- Monitoring application security metrics, including vulnerability patch timelines and policy exceptions, to support regular leadership reporting
- Working with cutting-edge GenAI tools and technology while supporting AI governance frameworks and helping ensure AI-enabled workflows align with privacy and security guardrails
Our take
The healthcare system often runs on inefficiencies; patients call outdated directories, wait weeks for a visit to a professional and are often hit with surprise bills. Zocdoc was founded to streamline the fragmented healthcare experience by putting the patient first.
The platform allows millions of users each month to view open appointment times with doctors, book instantly online, read verified reviews, and keep up-to-date with checkups. The platform works for both in-person and virtual care – the latter of which has seen a substantial increase in demand. Zocdoc is one of the few companies tackling these problems in healthcare.
The company has solidified its position in the SaaS space, in part by forming partnerships with companies such as WellHive, a leader in digital care, to drive healthcare support for veterans. Moving forward, Zocdoc will continue to invest in its platform to optimise its services for its users.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Feb 2021
$150m
GROWTH EQUITY VC
Aug 2015
$130m
SERIES D
Total funding: $452m
Company benefits
- 100% paid employee health benefit options
- Vacation and parental leave packages
- Lunch and snacks on us (in-office)
- Cell phone reimbursement
- Corporate wellness programs with Headspace and Peloton
- Employer funded 401(k) match
Company HQ
SoHo, New York, NY
Leadership
Oliver Kharra
(Co-Founder & Co-Founder)Oliver trained as a doctor in Germany before moving into consulting where he worked for McKinsey. During his seven-year tenure at McKinsey & Co., Oliver developed and implemented new patient utilization models for the national health services of a number of governments and major hospital chains
Nick (Nikhil) Ganju
(Co-Founder & Chief AI Officer)Nick has extensive experience in product development, database management and site architecture. He was responsible for building the earliest iterations of ZocDoc and directly overseeing its development for many of its first years
Share this job
View 21 more jobs at Zocdoc