Base Salary
$100k - $140k/yr
Responsibilities
- Serve as an accessible security contact for engineering squads and support secure software development lifecycle guidelines.
- Help developers interpret static analysis and software composition analysis alerts, including distinguishing true vulnerabilities from false positives.
- Provide actionable guidance for remediating application security vulnerabilities aligned with the OWASP Top 10.
- Maintain security documentation, developer playbooks, and secure coding training materials.
- Track security milestones and organize repository and deployment-pipeline evidence for compliance audits.
- Monitor vulnerability patch timelines, policy exceptions, and other application security metrics for leadership reporting.
- Support AI governance frameworks and help ensure AI-enabled workflows follow privacy and security guardrails.
Requirements
- Meaningful experience in information security, software engineering, or IT audit with an application security focus.
- Foundational understanding of software development processes and security in agile environments.
- Familiarity with code review concepts and ability to read at least one major cloud-environment language, such as Python, JavaScript, Go, or Java.
- Basic exposure to AWS, GCP, or Azure and understanding of Git workflows.
- Conceptual understanding of vulnerability categories and web application security standards.
- Interest in AI security risks, emerging technologies, and automated workflows.
- Ability to integrate generative AI tools into daily workflows to automate tasks, foster innovation, and improve productivity.
- A degree in Computer Science, Cybersecurity, or a related technical field is preferred; equivalent hands-on experience or certifications such as Security+, GSEC, or CEH are also valued.
- Strong communication, collaboration, humility, and stakeholder-support skills.
Benefits
- Flexible work environment.
- Unlimited vacation.
- 100% paid employee health benefit options, including medical, dental, and vision.
- 401(k) with employer-funded match.
- Corporate wellness program with Wellhub.
- Sabbatical leave for employees with 5+ years of service.
- Paid parental leave and fertility/family planning reimbursement.
- Cell phone reimbursement.
- Employee Resource Groups and ZocClubs.
- Great Place to Work Certified.
Categories
About Zocdoc
Zocdoc is the healthcare access infrastructure that connects patients to great care. By powering seamless scheduling wherever patients are seeking care, Zocdoc helps them move from being stuck to being seen. Each month, millions of patients find and book appointments with providers, powered by Zocdoc—on the company’s website and app, and across online search, insurance directories, providers’ websites, practice phone lines, AI platforms, and more—with the typical appointment happening within 24 to 72 hours from booking. With nearly two decades of experience unifying healthcare’s fragmentation, Zocdoc is uniquely positioned to power access across insurance plans, EHRs and PMS systems, specialties, visit types, and provider organizations of every size. By fixing healthcare at the start, Zocdoc empowers patients to get the care they need, when they need it, while delivering scaled patient growth providers can count on.