Senior Application Security Engineer

Job Summary

To support a growing healthcare AI platform, the full-time Senior Application Security Engineer will partner with product squads to enhance security practices, manage authentication and authorization processes, and run code-security findings while working in a hybrid environment.

Key responsibilities

• Collaborate with product teams to conduct security design reviews and threat modeling
• Secure authentication surfaces and proactively identify access control vulnerabilities
• Manage the code-security findings loop, including triaging results from various security scanners

Required qualifications

• 5 to 8+ years in security engineering, with at least 2 to 3 years in application or product security
• Deep understanding of web and API security, including OAuth 2.0, session design, and OWASP Top 10
• Strong coding skills in languages such as Kotlin and Python, with experience in automating security processes
• Experience in conducting threat modeling and operating security scanning tools within CI/CD environments
• Fluency in both French and English, with excellent communication skills to build trust with developers