Sr. Application Security Engineer - Remote

Overview

The Security Team at Rula is responsible for ensuring the protection of patient data and all of the technology behind our platform. We maintain close partnerships with Engineering and Product teams, but interface with everyone across the company to ensure that security is a core component of Rula’s culture. In this role, you’ll have the opportunity to enhance the security of our code and development practices, and enhance our vulnerability management program with Engineering and external partners.

In Short

• 4+ years of experience as an application security engineer.
• Experience with JavaScript, TypeScript, Node.js, and/or Ruby.
• Demonstrated success applying OWASP Top 10 recommendations to modern application stacks.
• Experience with common SAST and DAST tooling and best practices.
• Experience launching and/or managing a bug bounty program.
• An understanding of HIPAA requirements and how they apply to application security.
• Established success leading threat modeling exercises to identify security risks in technical designs.
• Experience with JS front-end libraries, preferably React.
• Experience interfacing with 3rd party pentesters to validate findings and develop remediation plans.

Requirements

• 100% remote work environment (US-based only).
• Attractive pay and benefits.
• Comprehensive health benefits.
• 401(k) plan access.
• Generous time-off policies.
• Paid parental leave.
• Employee Assistance Program (EAP).
• New hire home office stipend.
• Quarterly department stipend.
• Wellness events and lunch & learns.

Benefits

• We believe that diversity, equity, and inclusion are fundamental to our mission.