Application Security Engineer

Anomaly

About The Position

We are looking for an Application Security Engineer to help secure Anomaly's products, platforms, and development lifecycle. In this role, you will partner closely with Engineering, Infrastructure, and Product teams to identify and mitigate security risks across our applications and cloud environments while enabling rapid product innovation. You will be responsible for embedding security into every stage of the software development lifecycle, helping engineers build secure systems by default. This includes performing security reviews, threat modeling new features, improving detection and remediation processes, and developing scalable security tooling and automation. The Application Security Engineer reports to the Chief Technology Officer and works closely with engineering leadership to ensure our products and infrastructure meet the security expectations of healthcare providers, partners, and regulators. This position is ideal for someone who enjoys hands-on technical security work, thrives in a fast-moving startup environment, and wants to have a direct impact on the security posture of AI-powered healthcare products.

Requirements

4+ years of experience in Application Security, Product Security, Security Engineering, or Software Engineering with a strong security focus
Strong understanding of common application security vulnerabilities and secure coding principles, including OWASP Top 10 risks
Experience conducting threat modeling, security reviews, and vulnerability assessments for web applications and APIs
Familiarity with modern application security tooling, including SAST, DAST, dependency scanning, container scanning, and CI/CD security controls
Experience securing cloud-native applications running on AWS
Proficiency in at least one modern programming language such as Python, Go, Java, TypeScript, or similar
Experience working closely with engineering teams to drive remediation and improve security posture
Understanding of authentication, authorization, cryptography, and secure system design principles
Ability to balance security, engineering velocity, and business priorities in a collaborative startup environment

Nice To Haves

Experience operating in regulated environments such as healthcare, fintech, or enterprise SaaS is a plus
Familiarity with AI/ML systems and emerging security considerations around LLMs, agents, and model-integrated applications is a plus

Responsibilities

Embed security throughout the software development lifecycle, from architecture and design reviews through deployment and monitoring
Perform application security assessments, threat modeling, and code reviews for new and existing products
Develop and maintain security tooling, automation, and guardrails to help engineers identify and remediate vulnerabilities early
Manage vulnerability detection and remediation processes across applications, APIs, cloud infrastructure, and third-party dependencies
Partner with engineering teams to improve secure coding practices and security awareness
Design and implement security controls for cloud-native environments running on AWS
Evaluate and improve authentication, authorization, secrets management, and data protection mechanisms across our products
Build and maintain security monitoring and detection capabilities for application and infrastructure environments
Conduct security testing, including static analysis, dynamic analysis, dependency scanning, and penetration testing coordination
Support customer security reviews and audits by providing technical expertise related to product and application security
Help define security standards and best practices for the development and deployment of AI-powered systems