Latest AI JobsBrowse Jobs
K Health logo

Senior Security Engineer - Application Security

K HealthNew York, NYInformation Security
Apply on company site
Salary
Not listed
Job type
Full-time
Posted
7 Aug 2026
Status
Open · checked 7d ago

About this role

K Health is seeking a Senior Security Engineer - Application Security to join their Information Security team in New York, NY. This position is ideal for an experienced security professional who wants to protect critical cloud infrastructure, applications, and customer trust within a regulated healthcare environment.

Role Overview

As a Senior Security Engineer - Application Security at K Health, the professional will operate within a lean team spanning AppSec, CloudSec, SecOps, ITSec, and Compliance. This position involves evaluating architecture, planning net new security solutions, and maintaining a world-class security posture in the healthcare technology sector. The role offers the autonomy to implement cutting-edge security measures across the entire technical ecosystem.

Key Responsibilities

Lead the development and implementation of application security protocols throughout the entire Software Development Lifecycle.
Collaborate with engineering teams to integrate security into architecture, design, development, testing, and deployment.
Conduct hands-on security testing for web applications, APIs, cloud-native services, and supporting infrastructure.
Build and enhance automated security testing within CI/CD pipelines, covering static analysis, dependency scanning, secrets detection, container scanning, and dynamic testing.
Evaluate and improve application security tool effectiveness while minimizing unnecessary findings and developer friction.
Formulate secure coding standards accompanied by developer-focused documentation.
Contribute expertise to vulnerability management, incident responses, investigations, and post-incident reviews.
Assess third-party applications, libraries, APIs, and integrations for potential security risks.
Ensure all product lines and systems comply with healthcare regulatory standards like HIPAA and GDPR.

Requirements

Possess at least 4 years of professional experience in application, product, or software security as an individual contributor, or as a software engineer transitioned into security.
Strong understanding of application security vulnerabilities and attack techniques, including the OWASP Top 10 and API security risks.
Experience executing manual security testing for modern web applications, APIs, and distributed systems.
Capability to review application architecture and source code for security weaknesses.
Familiarity with integrating application security tools into modern CI/CD workflows.
Knowledge of static testing, dynamic testing, secrets detection, container security, and infrastructure-as-code scanning.
Understanding of authentication, authorization, session management, cryptography, secrets management, and secure API design.
Expertise in cloud technology such as AWS, GCP, or Azure, alongside modern programming languages, generative coding utilities, and AI code development security implications.
Proven background in researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines.

Nice to Have

Passion for exploring, partnering on, and implementing bleeding-edge technology.
Experience with specific tools used by K Health, including Datadog, Sumologic, Torq, flare.io, Entitle, Okta, Orca, GitLab, and Prisma.

Skills and Tools

Cloud Technologies: AWS, GCP, Azure
Security Tools and Platforms: Datadog, Sumologic, Torq, flare.io, Entitle, Okta, Orca, GitLab, Prisma
Core Competencies: Application Security, CI/CD Security Integration, Vulnerability Management, Compliance (HIPAA, GDPR), Secure Coding Standards

Salary and Benefits

The compensation for this position ranges from $150,000 to $200,000 USD. Competitive compensation packages are based on industry benchmarks for function, level, and geographic location, with specific offer amounts determined by factors such as a candidate's experience and expertise. K Health is an Equal Opportunity Employer.

About the Company

Founded in 2016 and headquartered in New York City, K Health operates an AI-powered virtual care engine that modernizes the primary care loop. Backed by over $443.5M from leading investors, the company provides clinical AI for patients, agentic solutions for providers, and virtualist services for health systems. K Health is deeply committed to building diverse teams and maintaining an inclusive workplace.

How to Apply

Interested candidates should apply directly on the official K Health careers page.

Skills and tech stack

AWSGCPAzure

Questions candidates ask

What is the salary range for the Senior Security Engineer role?

The salary range for this position is $150,000 to $200,000 USD, determined by experience, expertise, and industry benchmarks.

Where is this job located?

This position is located in New York, NY.

How many years of experience are required?

Candidates must have at least 4 years of professional experience in application, product, or software security, or as a software engineer who has pivoted into security.

What cloud platforms are relevant for this position?

Strong expertise in cloud technology including AWS, GCP, or Azure is required.

How should I apply for this job?

Applicants should apply directly through the official K Health careers page.

Ready to apply?

The application is on the official K Health careers page.

Apply on company site