Remote Sr. Application Security Engineer (Remote)

Description:

• The Sr. Application Security Engineer will be responsible for ensuring the protection of patient data and the technology behind the platform at Rula.
• This role involves close collaboration with Engineering and Product teams, as well as interfacing with all departments to integrate security into the company culture.
• The engineer will enhance the security of code and development practices and launch a vulnerability management program with Engineering and external partners.
• The position offers endless learning opportunities and projects that will help refine skills while contributing to better patient outcomes in mental healthcare.

Requirements:

• Candidates must have 4+ years of experience as a security engineer with development experience.
• Some experience with TypeScript and/or Node.js is required.
• A functional knowledge of the OWASP Top 10 and its application to modern systems is necessary.
• Experience with common SAST and DAST tooling and best practices is essential.
• Preferred qualifications include experience launching and/or managing a bug bounty program, understanding HIPAA requirements related to application security, and experience with Web Application Firewall (WAF) tuning and alerting.
• Familiarity with JS front-end libraries, preferably React, and experience interfacing with 3rd party pentesters to validate findings and develop remediation plans are also preferred.

Benefits:

• The position offers a 100% remote work environment, promoting a healthy work-life balance.
• Employees receive attractive pay and benefits with full transparency of pay ranges regardless of location in the United States.
• Comprehensive health benefits include medical, dental, vision, life, disability, and FSA/HSA.
• Access to a 401(k) plan is provided to help employees save for their future.
• Generous time-off policies include 2 company-wide shutdown weeks each year for self-care.
• Paid parental leave is available for all parents, including birthing, non-birthing, adopting, and fostering.
• An Employee Assistance Program (EAP) is offered to support mental and physical health.
• A new hire home office stipend is provided to set up a successful workspace.
• Quarterly department stipends fund team-building activities or in-person gatherings.
• Wellness events and lunch & learns are organized to explore engaging topics.
• Community and employee resource groups foster a sense of belonging and celebrate employee identity and lived experiences.
• Discounted programs such as Fetch, SmartSpend, Ladder, and SoFi are available to employees.