HeartFlow, Inc. is a medical technology company advancing the diagnosis and management of coronary artery disease, the #1 cause of death worldwide, using cutting-edge technology. The flagship product—an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain Guidelines called the HeartFlow FFR_CTAnalysis—provides a color-coded, 3D model of a patient’s coronary arteries indicating the impact blockages have on blood flow to the heart. HeartFlow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway that helps clinicians identify stenoses in the coronary arteries (RoadMap™Analysis), assess coronary blood flow (FFR_CTAnalysis), and characterize and quantify coronary atherosclerosis (Plaque Analysis). Our pipeline of products is growing and so is our team; join us in helping to revolutionize precision heartcare.

In Short

Develop secure and robust authentication and authorization workflows
Drive technical decision around identity management and access control
Design and implement scalable backend services and APIs
Identify technology risks and dependencies early to establish mitigation plans
Mentor and guide other engineers in secure backend best practices and OWASP
Lead the architecture of distributed systems and microservices
Building and maintain critical backend infrastructure
Participate in security audits and compliance reviews
Collaborate with InfoSec and AppSec teams on security implementations
Collaborate cross-functionally with key partners in Product Management, Strategy, Operations, and Regulatory to ensure high-quality, high-impact delivery of innovative software projects

Requirements

Education: Bachelor's degree in Computer Science, Engineering, or related discipline, or equivalent experience.
Experience: 10+ years of relevant industry experience
Strong proficiency in modern backend (e.g., Python, Java, Go, Django, Flask, or similar) technologies and database technologies (SQL, NoSQL, or similar) understanding of front-end (e.g., Vue.js, JavaScript, React, Angular, or similar) technologies
Proven track record implementing authentication and authorization systems
Strong expertise in distributed systems and microservices architecture
Demonstrated experience in building, deploying large-scale, secure RESTful APIs
Experience driving technical vision and leading architectural decisions; ability to mentor and lead other engineers.
Experience with Agile development methodologies and project management tools.
Strong understanding of web security best practices.
Experience with DevOps best practices (e.g., CI/CD pipelines).
Experience with or willingness to learn about FDA regulations and compliance requirements for medical software.
Demonstrated ability to work in a fast-paced, collaborative environment.