Senior Application Security Engineer

About the Job: 

The Senior Application Security Engineer reports to the Chief Information Security Officer (CISO) and works directly with the software development and production operations teams building and maintaining our 10 SaaS platforms across Radicle Health. This role requires a hands-on technical engineer to architect software security tooling and integrate security in the software development process.

Who you are: 

• 3-5 years of scripting and development experience, preferably supporting web applications.
• 2-3 years of cloud engineering experience, preferably using Infrastructure as Code. (Emphasis in AWS)
• Familiarity with Claude AI and other AI tools and leveraging agentic AI for automation.
• NIST and HIPAA experience a plus.
• Demonstrated excellent judgment in assessing and prioritizing technical risk.
• Knowledge of security best practices and standards, such as OWASP and OWASP ASVS, S-SDLC, and BSIMM.
• Excellent communication skills with the ability to articulate complex security issues to technical and non-technical collaborators, with an inclusive mindset.
• You work to identify and remove bottlenecks for your teammates, both in process and technology.
• Familiarity with a wide variety of security tools, technologies, and methodologies

In this role, you will:

• Lead initiatives and projects to support and enhance security in our application development processes.
• Bring your ideas forward, evaluating how to optimize the tools we're using and exploring technologies to enhance our security posture and support scalability.
• Conduct internal penetration testing and code reviews.
• Lead and mature Radicle Health’s vulnerability management program.
• Create, update, and maintain threat models for a wide variety of software projects.
• Leverage AI to automate workflows and build efficiencies.
• Work closely with software developers to advise on secure coding practices, assist with vulnerability remediation, establish a proactive security posture, and promote continual process improvement.
• Develop and lead projects to regularly analyze source code, pinpointing and supporting remediation of potential vulnerabilities upon discovery.
• Draft communications detailing status of security projects and programs to provide stakeholder updates and obtain leadership support.
• Support development of security training material and provide guidance for internal software development teams.
• Lead incident response.

6 Month Outcomes:

• Influence Software Development: Meet the Radicle software development teams and make a positive impact on how they address security.
• Understand SDLC: Review documented development processes and understand how they are implemented for each team.
• Define Target State: Identify security tools and integration points within development processes.
• Map Vulnerability Management: Map the flow for vulnerability management and identify where AI can automate and speed up the process.

12 Month Outcomes:

• Penetration Testing: Coordinate contracted Pen testing for products and associated mitigations.
• Stakeholder Support: Work with the CISO, Engineering Leads and Product to generate support for mitigation plans.
• Implementation: Continue to drive tooling integration across the tech stack.
• Risk Reduction: Drive down existing security tech debt.

What we offer: 

• Unlimited PTO policy 

• Competitive medical, dental, and vision healthcare coverage  

• 401k matching 

• Paid holidays 

• Volunteer time off 

• Paid parental leave 

• Remote work stipend  

• Compensation: $125,000 - $145,000 OTE

• Location: Remote 

Please note that all official communication regarding opportunities at Radicle Health will only come from an @radicle-health.com email address. Some fraudulent domains may look very similar at a glance, so if anything feels off, please proceed with caution.

Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. More information about the salary range specific to your working location and other factors will be shared during the hiring process.