Nexhealth
Senior Software Engineer, Security
Seattle, Washington, United States. Posted 6 months ago
The role
You will own application security across the product platform including APIs, integrations, payments infrastructure, and the developer ecosystem. This hands-on role involves writing code, designing secure systems, and reviewing architecture alongside product engineering teams.
What you will do
- Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
- Lead threat modeling and security design reviews for new features
- Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
- Improve authentication, authorization, and access control systems
- Integrate and maintain security tooling in CI/CD pipelines
- Contribute to secure coding standards, internal libraries, and developer-facing security frameworks
- Support HIPAA and SOC 2 compliance through system design and documentation
- Raise the security bar through code reviews, education, and pairing with developers
Required qualifications
- 5+ years of software engineering experience
- 1–3+ years focused on application or product security
- Experience building and securing backend systems in Python, Go, Java, or similar languages
- Solid understanding of common vulnerabilities and mitigations (OWASP Top 10 and beyond)
- Hands-on experience securing APIs and implementing authentication/authorization systems (OAuth 2.0, JWT, RBAC)
- Experience working in cloud environments (AWS and Google Cloud)
- Familiarity with security tooling: SAST, DAST, dependency scanning
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
Benefits
- Full Medical, Dental, and Vision (up to 100% covered)
- 401K
- Commuter benefits
- Flexible PTO
- Stock options
About the company
NexHealth is building the infrastructure layer for modern healthcare by connecting patients, providers, and developers. The company connects fragmented EHR systems into a single platform that powers software, APIs, payments, and patient experiences.