Senior Security Engineer

Who you are

• 4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security
• Strong understanding of application security vulnerabilities and attach techniques, including OWASP Top 10 and API security risks
• Experience performing manual security testing of modern web applications, APIs and distributed systems
• Ability to review application architecture and source code for security weaknesses
• Experience integrating application security tools into modern CI/CD workflows
• Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning
• Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design
• Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities
• Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines
• Exploring, partnering and implementing bleeding edge tech not readily available to others
• Experience with specific tools and tech K uses including but not limited to: Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, GitLab, Prisma

What the job involves

• This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust
• As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions
• You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats
• This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space
• Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC)
• Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment
• Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure
• Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing
• Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction
• Develop secure coding standards with developer-focused documentation
• Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews
• Evaluate third party applications, libraries and APIs and integrations for security risk
• Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems

Benefits

• Equity in K Health for all full-time employees
• Our hybrid work schedule offers working from home and in-office days
• Up to 6 weeks of parental leave with additional leave offered through our 3rd party administrator, Sparrow
• 18 Vacation days, 5 sick days, and 2 personal days (plus days off for national holidays and multiple company-wide 3 day weekends per year)
• Choose between three comprehensive plans for your medical, dental, and vision (employees are also eligible to use our K Health app for free!)
• Gym Reimbursement for any employees who are enrolled in a medical plan
• K will match 100% of employee contributions to their 401(k) up to 3% of their salary, and then 50% up to 5%
• FSAs, HSA, Parking and Commuter accounts