Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Heartflow is seeking an Application Security Engineer to collaborate with their engineering team, ensuring security is integrated into the Software Development Lifecycle (SDLC). This role offers the opportunity to protect patients by building AI-driven healthcare products, working with talented engineers on complex challenges, and making a direct impact on patient outcomes.

Responsibilities

• Provide hands-on technical guidance to software developers throughout the vulnerability remediation lifecycle.
• Perform secure code reviews and validate false positive determinations.
• Coach developers on effective remediation strategies.
• Threat model products and execute essential parts of a secure SDLC.
• Drive vulnerability identification using SAST, DAST, SCA, and in-house AI tooling.
• Manage external penetration testing.
• Support engineering teams on vulnerability management, including risk assessment and remediation.
• Improve the identification of vulnerabilities.
• Translate security and privacy requirements into technical requirements.
• Build security awareness through training on secure coding practices, security standards, and latest security threats.

Requirements

• Ability to reason about risk in complex environments and communicate that risk to technical and non-technical audiences.
• Experience leading training and speaking internally/externally about security projects.
• Experience writing and maintaining code in at least one modern programming language and with at least one scripting language (Heartflow uses C++/Python).
• Comfortable with testing frameworks and CI/CD pipelines.
• Experience using AI code tools such as Claude Code and Github Copilot for development and security testing.
• BS in Computer Science (or related degree) or relevant certifications and equivalent experience.
• 5+ years of total experience with at least 1 year working in Application Security or performing security tasks in a development role.
• Contributed to secure SDLC activities, including threat modeling, code review, security testing, and vulnerability management.
• Experience working with or ability to discuss current AI threats for both machine learning and generative AI.

Skills

• Security Communication
• Programming Skills
• AI Development Tools
• Securing SDLC
• Modern AI Security Threats
• HIPAA
• HITRUST
• Software as a Medical Device (SaMD)
• Infrastructure as Code
• Cloud
• AWS
• Terraform
• Chef
• Ansible
• Docker
• Kubernetes
• GitHub Actions

Location

• San Francisco

Work Type

• Hybrid

Experience Level

• 5+ years of total experience
• 1+ year in Application Security or security tasks in a development role

Education Level

• BS in Computer Science or related degree
• Relevant certifications and equivalent experience

Salary/Compensations

• $145,000 to $180,000 per year
• bonus
• equity

About the Company

• Heartflow is a medical technology company advancing the diagnosis and management of coronary artery disease using cutting-edge technology.
• The flagship product is an AI-driven, non-invasive cardiac test called the Heartflow FFRCT Analysis.
• Heartflow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway.
• Heartflow is a publicly traded company (HTFL) that has received international recognition for exceptional strides in healthcare innovation.
• The product is cleared for use in the US, UK, Europe, Japan and Canada, and has been used for more than 500,000 patients worldwide.

Equal Opportunity

• Heartflow is an Equal Opportunity Employer.
• We are committed to a work environment that supports, inspires, and respects all individuals and do not discriminate against any employee or applicant because of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.
• This policy applies to every aspect of employment at Heartflow, including recruitment, hiring, training, relocation, promotion, and termination.