Sr. Application Security Engineer (Remote) - job 2 of 2

This position is posted by Jobgether on behalf of Path. We are currently looking for a Sr. Application Security Engineer in United States.

As a Sr. Application Security Engineer, you will be responsible for ensuring the safety and integrity of applications within a healthcare-focused digital environment. You will collaborate closely with engineering, product, and security teams to embed best-in-class security practices throughout the software development lifecycle. Your work will include vulnerability management, threat modeling, and security reviews, helping to safeguard sensitive user data while enabling innovation. This role offers the opportunity to influence secure development practices, enhance existing security programs, and contribute to a culture that prioritizes privacy and trust. You will encounter complex challenges, learn continuously, and have a direct impact on protecting critical applications and the people who rely on them.

Accountabilities

·         Conduct application security reviews, including threat modeling, code analysis, and architectural assessments.

·         Manage vulnerability detection and remediation processes using SAST/DAST tools and industry best practices.

·         Collaborate with engineering and product teams to integrate security controls and improve secure development practices.

·         Review and triage externally reported security vulnerabilities, including bug bounty submissions.

·         Interface with third-party penetration testers to validate findings and develop actionable remediation plans.

·         Support compliance efforts, including adherence to HIPAA and other applicable regulations.

·         Mentor and advise teams on secure coding, application security risks, and mitigation strategies.

·         5+ years of experience in security engineering or a related role.

·         3+ years of experience in application security engineering.

·         Strong knowledge of TypeScript, JavaScript, and/or Node.js.

·         Expertise in OWASP Top 10 and applying these principles to modern systems.

·         Proven experience with SAST and DAST tooling and related best practices.

·         Preferred: experience with React or other front-end JS libraries, threat modeling, and HIPAA compliance understanding.

·         Excellent communication and collaboration skills, with the ability to influence cross-functional teams.

·         Strong analytical and problem-solving abilities, with attention to detail and security-minded thinking.

·         Competitive salary range: $155,500 – $183,000, plus equity.

·         100% remote work environment (US-based), supporting work-life balance.

·         Comprehensive health coverage: medical, dental, vision, life, disability, and FSA/HSA.

·         401(k) plan access for retirement planning.

·         Generous time-off policies, including two company-wide shutdown weeks annually.

·         Paid parental leave for all parents.

·         Employee Assistance Program (EAP) supporting mental and physical well-being.

·         Home office and quarterly department stipends for equipment and team-building.

·         Wellness events, lunch & learns, and participation in community and employee resource groups.

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.
When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.
🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements.
📊 It compares your profile to the job’s core requirements and past success factors to determine your match score.
🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role.
🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.
The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role.
Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.

Thank you for your interest!

#LI-CL1