Nexhealth

Senior Software Engineer, Security

Seattle, Washington, United States. Posted 6 months ago

The role

You will own application security across the product platform including APIs, integrations, payments infrastructure, and the developer ecosystem. This hands-on role involves writing code, designing secure systems, and reviewing architecture alongside product engineering teams.

What you will do

  • Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
  • Lead threat modeling and security design reviews for new features
  • Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
  • Improve authentication, authorization, and access control systems
  • Integrate and maintain security tooling in CI/CD pipelines
  • Contribute to secure coding standards, internal libraries, and developer-facing security frameworks
  • Support HIPAA and SOC 2 compliance through system design and documentation
  • Raise the security bar through code reviews, education, and pairing with developers

Required qualifications

  • 5+ years of software engineering experience
  • 1–3+ years focused on application or product security
  • Experience building and securing backend systems in Python, Go, Java, or similar languages
  • Solid understanding of common vulnerabilities and mitigations (OWASP Top 10 and beyond)
  • Hands-on experience securing APIs and implementing authentication/authorization systems (OAuth 2.0, JWT, RBAC)
  • Experience working in cloud environments (AWS and Google Cloud)
  • Familiarity with security tooling: SAST, DAST, dependency scanning
  • Bachelor's degree in Computer Science, Engineering, or equivalent practical experience

Benefits

  • Full Medical, Dental, and Vision (up to 100% covered)
  • 401K
  • Commuter benefits
  • Flexible PTO
  • Stock options

About the company

NexHealth is building the infrastructure layer for modern healthcare by connecting patients, providers, and developers. The company connects fragmented EHR systems into a single platform that powers software, APIs, payments, and patient experiences.

Senior Software Engineer, Security at Nexhealth | JobZoey