Senior Engineer, Healthie
App Security
$180-200k
+ Equity + Company Bonus
More information about location
Infrastructure for virtual-first healthcare organizations
Be an early applicant
Infrastructure for virtual-first healthcare organizations
101-200 employees
Be an early applicant
$180-200k
+ Equity + Company Bonus
More information about location
101-200 employees
Company mission
To empower the providers and builders of the care ecosystem with the tools they need to deliver a complete virtual experience for the end-consumers.
Role
Who you are
- 5+ years of experience in application or product security roles, preferably in high-growth, cloud-native environments
- Deep understanding of web application security, secure architecture patterns, and common vulnerabilities (e.g., OWASP Top 10, CIS controls, SANS Secure Coding Practices, etc.)
- Strong background in secure software development practices, particularly in GraphQL, Ruby on Rails, React, or similar web frameworks
- Experience with DevSecOps practices and security tooling
- Experience building or maturing application-layer security programs, policies, or guidelines
- Comfortable working across cross-functional teams and influencing security decisions without formal authority
- You are mission-driven, passionate about healthcare, and motivated to build systems that improve patient safety and data integrity
- Bonus: Experience with healthcare-specific security practices and compliance audits (e.g., SOC 2, HIPAA)
What the job involves
- We are hiring a Senior Application Security Engineer to join our Platform Engineering team at Healthie
- In this role, you will serve as a security and technical contributor, responsible for safeguarding our application layer and driving security best practices across the engineering organization
- You’ll partner closely with platform, infrastructure and core engineering teams to design secure-by-default systems, embed security into our SDLC, and proactively identify and remediate vulnerabilities in our code and cloud infrastructure
- This is a hands-on role, ideal for someone who is excited to contribute to security programs in a fast-moving startup environment and help shape the future of security at Healthie
- As our first dedicated AppSec hire, you’ll have the opportunity to continue to refine our secure development lifecycle, influence architectural decisions, and champion a culture of security awareness across the company
- If you're passionate about building impactful systems, driving innovation, and making a difference in healthcare — we’d love to hear from you
- Design and implement secure coding standards and tooling for application-layer security
- Conduct threat modeling and secure design reviews; manage ethical hacker program and third-party vulnerability reports
- Lead regular code reviews, internal audits, and dynamic/static analysis efforts
- Proficient at performing internal pentests
- Contribute to the definition and design of Healthie’s secure development lifecycle (S-SDLC), including integration of security into CI/CD workflows
- Administer, configure, and maintain Semgrep and other static and dynamic application security testing (SAST/DAST) tools to ensure continuous and effective code security
- Partner with Engineering and Product teams to triage and remediate vulnerabilities quickly and safely
- Build incident response playbooks for application-layer threats and support security investigations
- Help build and promote a security champions program
- Help ensure Healthie remains compliant with relevant standards (e.g., HIPAA, SOC 2, GDPR) from a software security perspective
Application process
- Video Interview with Debbie, AI recruiter
- Quick chat with Katie, Director of Talent (20 minutes)
- Interview with Sherilyn, Engineering Manager for Platform (30 minutes)
- Take Home Assessment - completed asynchronously
- Technical Interview with Chris and Andrew, Engineers for Platform (1 hour)
- Leadership Interviews:
- Interview with John N, VP Security & Compliance (30 minutes)
- Interview with John B, Director, Engineering (30 minutes)
- Behavioral Executive Interview with Cavan, CTO + cofounder- (20 minutes)
- Reference checks
Our take
The past few years have seen a substantial rise in provision and uptake of telemedicine services, with over one in five Americans now signed up. This successful reimagining of healthcare provision into something more accessible, affordable, and effective, has led to a surge of VC investment and rapid-growth success stories in the sector. Would-be startups, however, have to navigate the costly and complex process of building out core, HIPAA-compliant infrastructure.
So software and API company Healthie is filling the gap in this market. The business helps these companies build and deliver health and wellness services by providing a fully-brandable suite of telehealth, business management, and coaching tools. This means that businesses can launch and scale at a fraction of the cost, and in a fraction of the time.
It’s a broad-based set of solutions that’s won Healthie an impressive number of client organizations across over 20 different countries. This vigorous growth looks likely to continue too with its regular funding rounds. Telemedicine remains a popular healthcare tool, and as regulations on telehealth data privacy tighten, the growing number of startups in this space are likely to need more support than ever.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
52% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Oct 2024
$23m
SERIES B
Jul 2022
$16m
SERIES A
Total funding: $41.2m
Company benefits
- Stock options
- Medical, dental, vision, life and disability coverages
- FSA and HSA
- Flexible vacation
- 401(k) plan with company matching
- Parental leave program
- Learning & development stipends
- Nutritional coaching
- Fitness membership budget
- Co-working subscriptions
- A laptop plus equipment stipend
- Summer Fridays
Company HQ
Chelsea, New York, NY
Leadership
Erica Jain
(CEO & Co-Founder)Conducted research at the Center for Research on Prospective Health Care, moving into a nutrition program analyst role at the Clinton Health Access Initiative, and finally spent time as a healthcare consultant with BCG.
Cavan Klinsky
(CTO & Co-Founder)Founded search engine Gevva, and then worked freelance as a web designer.
Share this job
View 9 more jobs at Healthie