Description:

Virta Health is seeking a Senior Application Security Engineer to enhance their application security program as part of a growing Foundations team.
The role involves defining strategy, implementing best practices, and embedding security principles across the organization.
Responsibilities include assessing current security controls, championing secure development practices, designing and managing security tooling, evolving identity and access management strategies, improving network security, developing clear security standards, leading security initiatives, and promoting security awareness.
The first 90 days will focus on understanding the company culture, learning existing systems, assessing security posture, prioritizing application security initiatives, and starting hands-on work on foundational projects.

Requirements:

Candidates must have significant hands-on experience in application security, including threat modeling, secure coding practices, vulnerability management, and security testing.
A strong understanding and practical experience in securing cloud-native applications, particularly in GCP, is required.
Proven ability to assess and mature existing security designs is essential.
Experience with security automation and implementing controls using Infrastructure as Code (IaC) principles is necessary.
Excellent communication skills to articulate complex security concepts and influence technical direction across teams are required.
A proactive, self-directed approach with a strong sense of ownership is essential.
Candidates should have a pragmatic approach to balancing security requirements with business needs.
Experience in regulated environments such as healthcare or fintech is a plus.
A solid grasp of networking concepts, identity management, encryption, and common web application vulnerabilities is required.

The compensation range for this role is $192,026 - $248,000, based on qualifications and experience.
As a remote-first company, Virta offers flexibility in work location.
Employees will receive security and privacy training to ensure compliance with HIPAA regulations.
Additional benefits information can be found on Virta's Careers page.