Loading...
LeadFull-timeTypeScriptPythonJavaRustC++AWSAgileCI/CDGitGo
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Charlie Health is seeking an experienced Lead Security Engineer to join our Information Security team. In this role, you will partner closely with engineering and product teams to embed secure development practices across the entire software development lifecycle (SDLC). You will be the subject matter expert on application security, guiding the business in building secure, scalable and HIPAA-compliant software solutions.
Key Responsibilities
- →Collaborate with product and IT engineering teams to design secure applications and features.
- →Educate developers on secure coding practices and security testing.
- →Conduct code reviews, threat models and risk assessments to identify and mitigate vulnerabilities early.
- →Develop and implement tools and frameworks to integrate security into CI/CD pipelines.
- →Lead implementation of security policies, standards and remediation processes.
- →Participate in security incident response, forensic investigations and security incident postmortems related to applications and systems.
Requirements
- ✓5+ years of experience in application security, secure software development, or related roles.
- ✓Bachelor’s degree in Computer Science or related field, or equivalent experience.
- ✓Proficiency in secure coding practices and languages such as TypeScript, Node, Python, Java, C++ or similar.
- ✓Hands-on experience with application security tools (e.g., Burp Suite, OWASP ZAP, Fiddler).
- ✓Deep understanding of web application vulnerabilities: XSS, CSRF, SQLi, session management, etc.
- ✓Experience implementing security in CI/CD pipelines such as GitHub Action and agile development workflows.
- ✓Familiarity with management and deployment of SAST, DAST, and SCA tooling
- ✓Knowledge of authentication technologies (i.e. Auth0, Okta, etc) and how to securely integrate them with applications
- ✓Strong communication skills with ability to clearly articulate risk to technical and non-technical audiences.
Benefits
- ★Competitive salary and stock options
- ★Health insurance and 401k
- ★Comprehensive benefits package
