5 months ago
Base Salary
$165k - $230k/yr
Responsibilities
- Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
- Lead threat modeling and security design reviews for new features
- Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
- Improve authentication, authorization, and access control systems, including OAuth, RBAC, and service-to-service authentication
- Integrate and maintain SAST, DAST, and dependency-scanning tools in CI/CD pipelines
- Develop secure coding standards, internal libraries, and developer-facing security frameworks
- Support HIPAA and SOC 2 compliance through system design and documentation
- Raise security standards across engineering through code reviews, education, and pairing with developers
Requirements
- At least 5 years of software engineering experience, including 1–3+ years focused on application or product security
- Experience building and securing backend systems using Python, Go, Java, or similar languages
- Strong understanding of common vulnerabilities and mitigations, including the OWASP Top 10
- Hands-on experience securing APIs and implementing OAuth 2.0, JWT, RBAC, and related authentication and authorization systems
- Experience working in AWS and Google Cloud environments
- Familiarity with SAST, DAST, and dependency-scanning security tools
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
Benefits
- Full medical, dental, and vision insurance with up to 100% coverage
- 401(k) and commuter benefits
- Flexible or unlimited paid time off
- Stock options may be available
- High-impact work improving the healthcare experience
- Work involves collaboration with product engineering, platform teams, and engineering leadership
About NexHealth
NexHealth builds a SaaS platform and APIs that sync with on‑premise EHR systems to power online scheduling, messaging, forms, and payments for medical and dental practices. It sells to healthcare providers and healthtech developers, offering an infrastructure layer that integrates practice operations with patient-facing experiences. Founded in 2017 and headquartered in San Francisco, NexHealth is privately held and focuses on connecting practices, patients, and developer-built apps across the healthcare ecosystem.