3 days ago
Base Salary
$128k - $196k/yr
Responsibilities
- Champion secure coding practices across Python and JavaScript codebases through design reviews, threat modeling, and code reviews.
- Build internal security tools, automation, secure libraries, CI/CD guardrails, pre-commit checks, and self-service workflows.
- Own and improve SAST, DAST, SCA/dependency scanning, secrets detection, container scanning, and infrastructure-as-code scanning in the SDLC.
- Integrate, triage, prioritize, track, and remediate cybersecurity findings through GitLab, Orca, AWS GuardDuty, Jira, and Bugbounty.
- Collaborate with product, infrastructure, machine learning, IT, clinical, QA, and regulatory teams to secure the AWS and Kubernetes SaaS platform.
- Mentor teammates, provide secure coding guidance and training, and uphold engineering, reliability, data integrity, compliance, and audit-readiness standards.
Requirements
- A BS in Computer Science, Software Engineering, Cybersecurity, or a closely related technical field is required.
- At least 5 years of full life cycle development and/or application security engineering experience is required.
- Strong hands-on knowledge of secure coding practices and vulnerability classes including OWASP Top 10 and CWE is required.
- Demonstrated experience building developer-focused tools and automation, ideally in Python, is required.
- Experience integrating SAST, DAST, SCA, secrets scanning, and container scanning into CI/CD pipelines is required.
- AWS cloud platform experience is required, along with collaboration, autonomous problem-solving, communication, and organizational skills.
- Preferred qualifications include regulated or healthcare software experience; an advanced degree or security certification such as OSCP, GWAPT, CSSLP, or CISSP; HL7, HL7 FHIR, or DICOM knowledge; threat modeling and vulnerability management experience; GitLab CI experience; Docker and Kubernetes security; Terraform and policy-as-code or IaC security scanning; and cloud security practices including IAM, network segmentation, logging, monitoring, and CSPM.
Benefits
- Remote or hybrid work arrangement, with the hybrid option based in Boston, MA.
- Relocation benefits are not available for this position.
Tech Stack
Apache KafkaAWSCloudflareDatadogDjangoDockerFastAPIGitLab CI/CDGoogle Cloud PlatformJavaScriptKubernetesPostgreSQLPythonTerraformVue.js
Categories
About PathAI
PathAI builds AI-powered pathology software and diagnostic services for biopharma, pathology labs, and health systems to support disease detection, clinical trials, and companion diagnostics. Offerings include machine-learning models for digital histopathology and a CLIA-certified lab operation. Founded in 2016 and headquartered in Boston, it operates as part of Quest Diagnostics and focuses heavily on oncology and immunology applications.