Application Security Engineer

What this role involves

Heartflow is seeking an Application Security Engineer to integrate security into the SDLC for AI-driven medical devices. The role involves secure code reviews, vulnerability management, and training, requiring 5+ years experience with at least 1 year in application security. The position is hybrid in San Francisco.

Skills this posting asks for

• application security
• sast
• dast
• sca
• secure code review
• threat modeling
• vulnerability management
• c++
• python
• ci/cd
• ai code tools
• claude code
• github copilot
• secure sdlc
• penetration testing

Requirements

• 5 years of experience
• Level: senior
• Remote policy: hybrid

From the employer’s posting

Heartflow is a medical technology company advancing the diagnosis and management of coronary artery disease, the #1 cause of death worldwide, using cutting-edge technology. The flagship product—an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain…