4 months ago
Base Salary
$165k - $230k/yr
Responsibilities
- Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
- Lead threat modeling and security design reviews for new features
- Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
- Improve authentication, authorization, and access control systems, including OAuth, RBAC, and service-to-service authentication
- Integrate and maintain SAST, DAST, and dependency-scanning tools in CI/CD pipelines
- Develop secure coding standards, internal libraries, and developer-facing security frameworks
- Support HIPAA and SOC 2 compliance through system design and documentation
- Raise security standards across engineering through code reviews, education, and pairing with developers
Requirements
- At least 5 years of software engineering experience, including 1–3+ years focused on application or product security
- Experience building and securing backend systems using Python, Go, Java, or similar languages
- Strong understanding of common vulnerabilities and mitigations, including the OWASP Top 10
- Hands-on experience securing APIs and implementing OAuth 2.0, JWT, RBAC, and related authentication and authorization systems
- Experience working in AWS and Google Cloud environments
- Familiarity with SAST, DAST, and dependency-scanning security tools
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
Benefits
- Full medical, dental, and vision insurance with up to 100% coverage
- 401(k) and commuter benefits
- Flexible or unlimited paid time off
- Stock options may be available
- High-impact work improving the healthcare experience
- Work involves collaboration with product engineering, platform teams, and engineering leadership
About NexHealth
NexHealth connects practices, developers, and patients. Practices use NexHealth to eliminate the work that shouldn't exist. Developers build on our API to help practices and the patients they support. 25% of the U.S. experiences their care through NexHealth-powered practices. Headquartered in San Francisco. Hiring across engineering, product, and go-to-market. nexhealth.com/careers