Remote Application Security Engineer

Summary

Join Datavant, a data platform company for healthcare, as a Security Engineer to drive critical projects that enhance the platform's capabilities and empower healthcare providers and researchers to deliver better care.

Requirements

• A collaborative and humble mindset with a passion for security
• A background in software development or a software engineering-adjacent field
• 1-3 years of experience in security engineering roles, with exposure to threat modeling and security control implementation
• An understanding of the roles within a security team and how they work together to support development teams
• Ability to articulate the importance of security throughout the software development lifecycle and to suggest improvements
• Strong collaborative skills; you thrive on working with others and are dedicated to team success.You will be expected to communicate on challenges and blocker early and often
• A focus on delivery and impact, with the ability to work effectively in a fast-paced environment. You see the security team as a partner to the engineering teams, providing guidance and support

Responsibilities

• Assist in rolling out and maintaining common application security tools, such as SAST, DAST and SCA
• Collaborate closely with security and development teams, providing hands-on support to ensure security controls are well-integrated into the development lifecycle
• Document processes and controls in a way that supports and enables the development teams, creating clear, actionable documentation that helps streamline workflows
• Participate in the review of application projects built by our development teams, offering feedback on code and architecture to ensure security best practices are followed
• Support and conduct security and threat model reviews under the guidance of senior security architects, learning to provide expertise on application security and security architecture topics
• Collaborate with the compliance team to gather evidence for audits and respond to customer assurance requests