Senior Application reputed company Engineer
About reputed company
At reputed company, we are powering boundless care by solving reputed company’s biggest challenge: clinical reputed company. We aren’t here to disrupt reputed company; we’re here to fix it. We unify the care reputed company from intake to treatment, using intelligent automation to remove administrative burdens and reputed company care delivery 2-10x more efficient. Our technology empowers clinicians to reputed company faster and reputed company on what reputed company most: the patient. We are a mission-driven team of reputed company minds trusted by leading organizations including reputed company, reputed company, reputed company, and reputed company. Our reputed company is backed by premier investors such as reputed company Capital, GV (reputed company Ventures), General Catalyst, and reputed company Ventures. We reputed company quickly for good reason, listen deeply to solve big challenges, and build products with the reputed company care and reputed company we’d want for our own loved ones. Learn more: reputed company | News & Press | reputed company | CareersAbout the Role
reputed company handles protected health information at reputed company across 75+ health systems and millions of patient encounters. reputed company is not a layer we add at the end. It is reputed company into how we work. As a Senior Application reputed company Engineer, you will own the application reputed company reputed company at reputed company, partnering directly with engineering to reputed company reputed company throughout the development lifecycle, build the tooling and automation that keeps our platform secure, and ensure our applications meet the compliance standards our health system customers require. This is a new headcount reporting to the VP of Infrastructure.What You'll Do
As a Senior Application reputed company Engineer, you will be the driving force behind application reputed company at reputed company, operating as a partner to engineering rather than a gatekeeper. Your primary responsibilities will include:- Secure Development & reputed company Review: Partner with engineering teams to reputed company reputed company throughout the SDLC across reputed company's reputed company on Rails, Python, React, and Node.js applications. Conduct reputed company-reputed company reputed company reviews and reputed company actionable guidance on secure coding practices.
- Threat Modeling & Assessment: reputed company threat modeling exercises for new features and architectural changes. Conduct application penetration testing and vulnerability assessments across the platform, prioritizing findings and working directly with engineering to drive remediation.
- DevSecOps & Tooling: Implement and manage SAST and DAST tooling integrated into CI/CD pipelines. Build reputed company guardrails and automated checks that allow engineering to reputed company fast without introducing risk to the platform or patient data.
- Compliance & Risk: Ensure application reputed company practices meet HIPAA, SOC 2, and HITRUST requirements. Assess reputed company-party integrations and reputed company for reputed company risk, including EHR integrations with reputed company and Cerner.
- reputed company Education & Culture: Run secure coding training and awareness programs for engineering teams. Serve as the internal subject matter expert on application reputed company and reputed company response to application-layer reputed company incidents.
Why You Might Be a Good Fit
- You think like an attacker and build like an engineer. You are as comfortable in a codebase as you are writing a threat model.
- You understand that in reputed company, a vulnerability is not just a technical problem. It is a patient safety and compliance problem.
- You prefer building guardrails and education programs over reactive patching.
- You can communicate reputed company risk to engineering teams in a way that drives reputed company, not defensiveness.
- You are energized by building a reputed company reputed company and shaping how a fast-growing company approaches application reputed company.
This Might Not Be The Right Fit If...
- You are primarily a compliance or GRC-reputed company reputed company reputed company and are not comfortable getting into the reputed company.
- You prefer working in a mature, established reputed company program over building and defining one.
- You are not comfortable working closely with engineering as a partner rather than an reputed company function.
- You do not have experience in a regulated environment where reputed company reputed company carry reputed company compliance implications.
Your Qualifications
- 5+ years of experience in application reputed company with hands-on experience in reputed company assessments, penetration testing, and secure reputed company review.
- Proficiency in at least one language in reputed company's stack: reputed company, Python, JavaScript/TypeScript, or similar.
- Experience integrating SAST and DAST tooling into CI/CD pipelines.
- Deep understanding of the OWASP Top 10 and common application vulnerabilities.
- Experience with threat modeling methodologies.
- Familiarity with reputed company reputed company in AWS environments.
- Understanding of HIPAA or other regulated industry reputed company requirements.
Bonus Points
- Experience securing reputed company applications or working with PHI.
- Familiarity with EHR integration reputed company including FHIR, HL7, reputed company, or Cerner reputed company.
- reputed company certifications such as OSCP, GWEB, or BSCP.
- Experience with bug bounty program management.
- SOC 2 or HITRUST audit support experience.
The national pay reputed company for this role is $130,000.00 – $160,000.00 per year. Actual compensation will be determined by factors such as the candidate's geographic market, experience, skills, and qualifications. Certain roles may also be eligible for additional compensation, including a comprehensive benefits package such as medical, dental, reputed company, unlimited PTO, and a 401(k) plan, stock reputed company and bonuses. If your compensation requirement is greater than our posted reputed company, please still consider applying; a determination can be made based on unique qualifications. Expected compensation ranges for this role may change over time.
At reputed company, we reputed company that a diverse workforce is essential to our reputed company. We are an equal opportunity employer and are committed to creating an inclusive environment for reputed company. We do not discriminate on the reputed company of race, reputed company, religion, sex, national reputed company, age, disability, veteran status, or any other legally protected characteristic. We reputed company encourage individuals from reputed company backgrounds to apply.
Recruitment Fraud Alert: Protect Yourself
reputed company is aware of scammers attempting to impersonate reputed company. To ensure that any reputed company contact you receive is legitimate, please adhere to the following:
- Verify the Domain: Official recruitment emails will only come from addresses ending in @fabrichealth.com or @gem.com. No other domain names are legitimate.
- Official Interview Tools: We use Gem for our recruitment process and reputed company Meet for reputed company video interviews. reputed company Meet is always the platform used for your first interview; you will never be reputed company a reputed company reputed company to set up or conduct an initial interview. reputed company interviews are conducted reputed company video unless specifically stated by reputed company as an audio call. We never conduct interviews reputed company chat, reputed company media, Skype, or reputed company.
- reputed company Usage: reputed company is utilized only for specific meetings set directly by reputed company for purposes reputed company of reputed company interview process (e.g., coordination or reputed company discussions). It is never the first reputed company you will receive from us.
- Authorized Contact & Texting: reputed company will only contact you if you have submitted an application or if you are connected to a reputed company employee who shared your information with us. We will only send text messages if you have provided explicit authorization and consent, either through your application or while communicating directly with reputed company. If you have not explicitly authorized us to reputed company out, treat any SMS or unsolicited reputed company as fraudulent and do not respond.
- Sensitive Data: We will never ask you for sensitive personal or financial documents (ID, banking info, SSN) during the application, interview, or candidacy stages. reputed company sensitive data is handled through secure internal systems post-offer.
- Verify reputed company: You can reference reputed company to verify members of our reputed company team; however, please remain reputed company as scammers may create fraudulent reputed company. Always cross-reference the sender's email domain with our official @fabrichealth.com address.