Senior Software Engineer, Security

The role

This person will own application security across the product platform, including APIs, integrations, and payments infrastructure. They will write code, design secure systems, and work alongside product engineering teams.

What you will do

• Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
• Lead threat modeling and security design reviews for new features
• Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
• Improve authentication, authorization, and access control systems
• Integrate and maintain security tooling in CI/CD pipelines
• Contribute to secure coding standards, internal libraries, and developer-facing security frameworks
• Support HIPAA and SOC 2 compliance through system design and documentation
• Raise the security bar through code reviews, education, and pairing with developers

Required qualifications

• 5+ years of software engineering experience
• 1–3+ years focused on application or product security
• Experience building and securing backend systems in Python, Go, Java, or similar languages
• Solid understanding of common vulnerabilities and mitigations (OWASP Top 10 and beyond)
• Hands-on experience securing APIs and implementing authentication/authorization systems (OAuth 2.0, JWT, RBAC)
• Experience working in cloud environments (AWS and Google Cloud)
• Familiarity with security tooling: SAST, DAST, dependency scanning
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience

Benefits

• Full Medical, Dental, and Vision (up to 100% covered)
• 401K
• Commuter benefits
• Flexible PTO
• Stock options

About the company

NexHealth is building the infrastructure layer for modern healthcare by connecting patients, providers, and developers. The company connects fragmented EHR systems into a single platform that powers software, APIs, payments, and patient experiences.