Senior Security Engineer (Application Security)

Join K Health, a leading healthcare technology company, as a Senior Security Engineer. In this role, you will be responsible for developing and implementing robust application security protocols, managing the security posture of K's core IT infrastructure, and ensuring adherence to relevant healthcare regulatory and compliance requirements. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem. This is a crucial role for establishing and maintaining a world-class security posture in the highly regulated healthcare technology space. - Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). - Design, deploy, and continuously monitor cloud security architecture across our cloud environments, ensuring performance and resilience. - Conduct proactive vulnerability assessments, penetration tests, and security reviews to identify and remediate potential weaknesses in our platforms. - 5+ years of experience in Information Security, Cloud Security, IT Security, and/or Application Security - Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines - Flexibility in covering a rotation for critical on-call support responsibilities - Excellent communication skills, capable of translating complex security risks into clear, actionable advice for technical and non-technical stakeholders - Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities - Expertise in compliance, security, and regulatory areas such as; HIPAA, PHI, AKS, SOC 2, ISO, GDPR, etc - Proven experience establishing a cutting-edge security posture, particularly within the regulated healthcare technology field - Exploring, partnering and implementing bleeding edge tech not readily available to others - Experience with specific tools and tech K uses including but not limited to: Datadog, Sumologic, Torq, , GCP, Entitle, Okta, Orca, FlowSec, Prisma