{"id":2009131,"url":"https://alion.io/job/candid-health-application-security-engineer","title":"Application Security Engineer","company":{"id":919,"name":"Candid Health","domain":"joincandidhealth.com","url":"https://alion.io/company/candid-health","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":258000,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-05-24T00:04:41Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-11T20:14:57Z","board_verified":true,"closed_at":null,"days_open":140,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":140},"description":"Join our team as a Product Security Engineer, where you will be a champion for security within our product engineering organization. You will work closely with development squads to perform threat modeling, guide secure architecture decisions, and automate security gates in our CI/CD pipelines. Your responsibilities will include leading threat modeling sessions, driving the adoption of secure development practices, managing vulnerabilities, building and maintaining security automation tools, developing secure coding standards, supporting incident response, and ensuring supply chain security. The ideal candidate will have 5+ years of experience in software engineering or security engineering, proficiency in programming languages, and a deep understanding of modern web/cloud architecture.\nMissions\nLead threat modeling sessions during the architectural design phase of new features to identify potential risk vectors early.\nDrive the adoption of \"Shift Left\" security practices, integrating security tooling (SAST, DAST, SCA) directly into developer workflows.\nTriage, prioritize, and partner with engineering teams to remediate vulnerabilities found in code, third-party libraries, and cloud infrastructure.\nProfil recherché\n - Technical Skills:- Familiarity with the OWASP Top 10 and common exploitation techniques\n- Problem Solving: Strong analytical skills to evaluate complex systems and design innovative, practical security solutions\n- Proficiency in one or more programming languages (e.g., Python, Go, Java, or JavaScript)\n- Deep understanding of modern web/cloud architecture (e.g., APIs, Microservices, Kubernetes, AWS/GCP/Azure)\n- Collaboration: Proven ability to influence and collaborate with engineering teams without hindering development velocity\n- Experience: 5+ years of experience in software engineering or security engineering, specifically focusing on product security or application security\n- Experience with Infrastructure as Code (IaC) security (e.g., Terraform, CloudFormation)\n- Experience in designing cryptographic implementations or secure authentication/authorization flows (e.g., OAuth, OIDC, JWT)\n- Knowledge of compliance frameworks relevant to our industry (e.g., SOC2, ISO27001, HIPAA)","description_format":"text","description_chars":2232,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Health Care","Revenue Cycle & Medical Billing"],"lifecycle":[{"event":"open","at":"2026-10-07T12:58:26Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.269,"p_room":0.28,"age_days":139,"expected_fill_days":22,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/candid-health-application-security-engineer","json_url":"https://alion.io/job/candid-health-application-security-engineer.json","meta":{"generated_at":"2026-10-11T20:29:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8546,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":919},"rest":"https://alion.io/mcp/rest/get_company?id=919"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcandid-health-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcandid-health-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcandid-health-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/candid-health-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcandid-health-application-security-engineer"}]}