Senior Security Engineer

### Job Information

* Date Opened 07/13/2026 * Job Type Full time * Industry Health Care * Work Experience 5+ years * City Burlington * State/Province Vermont * Country United States * Zip/Postal Code 05401 ### Job Description

Title: Senior Security Engineer

Team: Engineering

Location: Remote-Friendly

About the Role

===================

We're looking for a Senior Security Engineer to lead application security efforts across our product portfolio, spanning web applications, APIs, mobile, embedded software, and shipped product deliverables. You'll be embedded in the engineering organization, partnering with product and platform teams to bake security into every phase of the software development lifecycle, not bolt it on at the end.

A critical part of this role is developing and maintaining a deep understanding of our product attack surface, how components interact, what's exposed, and where real risk lives. That understanding is what transforms security tooling output into prioritized, meaningful action across threat modeling, vulnerability management, and supply chain risk.

This is a high-impact role for someone who is equally comfortable reading source code, threat modeling a new microservice, and coaching a developer through a secure code review.

What You'll Do

Application Security & Secure SDLC

• Own and evolve the AppSec program across the entire SDLC — from design reviews to post-deployment monitoring — for web, API, mobile, and shipped product deliverables
• Build and maintain a living model of the product attack surface — mapping trust boundaries, data flows, exposed interfaces, and high-value targets — and use it to drive prioritization across all security workstreams
• Conduct threat modeling and architecture security reviews for new features, services, and product releases across all delivery channels
• Perform manual and automated secure code reviews across multiple languages (e.g. Python