172K–200K USD / year
Senior Application Security Engineer
DevOpsRemote — United States
Published on 2026-10-02
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own application-layer security across Turquoise Health’s platform, building and improving security scanning and guiding vulnerability remediation. Partner with engineering and product teams on secure design, code, and CI/CD practices.
About the company
Turquoise Health is a healthcare price and contract transparency platform that helps payers, providers, and employers understand costs and improve how care gets paid.
What you'll do
- Build and tune SAST, DAST, dependency, container, and infrastructure-as-code scanning.
- Triage scan, penetration test, and bug bounty findings and track fixes to completion.
- Provide hands-on code and architecture guidance to engineering teams.
- Perform threat modeling and maintain secure-coding standards.
- Support application security incident response and coordinate third-party penetration tests.
- Report on vulnerabilities, remediation SLAs, and scan coverage.
What we're looking for
- 5+ years in application security, security engineering, or security-focused software engineering.
- Hands-on experience with SAST, DAST, and dependency/SCA scanning.
- Strong knowledge of common vulnerability classes and code and architecture review.
- Experience securing cloud environments, preferably AWS, and CI/CD pipelines.
- Clear communication and a collaborative, pragmatic approach to security.
Nice to have
- Experience in healthcare, fintech, or another regulated industry.
- HIPAA, SOC 2, or GDPR experience.
- OSCP, GWAPT, or CSSLP certification.
- Experience building an early-stage application security program.
- Scripting or automation experience with Python, Go, Terraform, or similar tools.
- Red team experience.
Benefits
- Equity options
- Medical, dental, and vision plans, with FSA, DCFSA, and HSA options
- Unlimited PTO and generous paid family leave
- 401(k) with 4% matching
- Fully remote work and flexible hours
- $750 work-from-home setup budget
- Paid biannual company summits
- Quarterly coworking stipend and monthly health and wellness benefit