Base Salary
$145k - $180k/yr
Responsibilities
- Provide hands-on technical guidance to developers throughout the vulnerability remediation lifecycle.
- Perform secure code reviews, validate false-positive determinations, coach developers on remediation strategies, and threat model products.
- Drive vulnerability identification using SAST, DAST, SCA, and in-house AI tooling.
- Manage external penetration testing and support vulnerability risk assessment and remediation.
- Translate security and privacy requirements into technical requirements and improve vulnerability identification processes.
- Deliver training on secure coding practices, security standards, and current security threats.
Requirements
- Bachelor’s degree in Computer Science or a related field, or relevant certifications and equivalent experience.
- At least five years of total professional experience, including at least one year in application security or performing security tasks in a development role.
- Experience writing and maintaining code in at least one modern programming language and one scripting language; Heartflow uses C++ and Python.
- Experience with secure SDLC activities including threat modeling, code review, security testing, and vulnerability management.
- Experience with or ability to discuss current security threats affecting machine learning and generative AI.
- Comfort with testing frameworks and CI/CD pipelines.
- Experience using AI development tools such as Claude Code and GitHub Copilot for development and security testing.
- Strong ability to assess security risk and communicate with technical and non-technical audiences.
- Healthcare experience, including HIPAA, HITRUST, or Software as a Medical Device, is preferred.
- Familiarity with AWS or equivalent cloud providers, Terraform, Chef, Ansible, Docker, Kubernetes, and GitHub Actions is preferred.
Benefits
- Hybrid work arrangement requiring three days per week in the San Francisco office.
- Base salary range of $145,000 to $180,000 per year, plus bonus and equity.
- Opportunity to work on healthcare technology used by more than 500,000 patients worldwide.
About Heartflow
Heartflow is the global leader in AI-driven coronary artery disease (CAD) management, transforming how CAD — the world’s leading cause of death — is diagnosed and treated. Our advanced technology generates personalized, precision 3D heart models from a single CT scan, providing clinicians with the clarity and confidence to deliver earlier, more effective treatments — transforming CAD into a disease that can be managed for life. Heartflow One is the only complete, non-invasive, precision coronary care platform providing patient insights throughout the guideline-directed coronary CTA pathway. The AI-driven platform — including Roadmap™ Analysis, FFRct Analysis and Plaque Analysis — is supported by ACC/AHA guidelines and backed by more than 625 peer-reviewed publications. With over 650,000 patients treated, more than 1,800 leading institutions adopting our solution, and 99.5% of U.S. lives covered — Heartflow is redefining the standard of coronary care. We're a global company, with employees across the United States, Europe and Japan. Our headquarters are in San Francisco, California, with additional offices in California, Texas, the UK and Japan. We believe CAD shouldn’t be a silent threat. We’re changing the story of CAD by making it screenable, diagnosable, and manageable — empowering clinicians to save lives and giving patients more time for what matters most.