Rula is hiring a
Sr. Application Security Engineer

Summary

The job is for a Security Engineer at Rula, a mental healthcare company. The role involves ensuring the protection of patient data and improving the security of their platform. The employee will work closely with various teams across the company to enhance security. Remote work is offered, along with competitive pay, benefits, generous time off policies, paid parental leave, an Employee Assistance Program, a home office stipend, quarterly department stipends for team building, wellness events, and lunch & learns.

Requirements

• 4+ years of experience as a security engineer
• 2+ years of that experience should be at the ‘Senior’ level
• Proficient with JavaScript, TypeScript, Node.js, and/or Ruby
• A functional understanding of OWASP Top 10 risks and how they apply to modern services
• Familiarity with SAST and CI/CD tooling and best practices
• Experience assessing vulnerabilities in code and packages, and articulating severity and remediation options to developers

Responsibilities

Ensure the protection of patient data and all technology supporting Rula’s platform

Preferred Qualifications

• Experience launching and/or managing a bug bounty program
• A functional understanding of HIPAA
• Ability to manage Web Application Firewall (WAF) tuning and alerts
• Familiarity with JS front-end libraries, preferably React
• Experience interfacing with 3rd party pen-testers to validate findings and develop remediation plans

Benefits

• 100% remote work environment from anywhere in the US
• Competitive pay and benefits that don’t change based on location
• Health benefits: medical, dental, vision, life, disability, and FSA/HSA
• Access to our 401(k) plan
• Generous time off policies, including 2 company-wide shutdown weeks each year (for most employees) to focus on self-care
• Paid parental leave
• Employee Assistance Program (EAP)
• Stipend to ensure your home office sets you up for success
• Quarterly department stipend for team building or in-person gatherings
• Wellness events and lunch & learns spanning many topics