Turquoise Health
Senior Application Security Engineer
$172K–$200K
Remote · Remote · Senior · Full-time · Posted Oct 2, 2026
- Experience
- 5+ years
- Visa sponsorship
- Requires current authorization to work in the United States; does not sponsor employment visas or assume sponsorship of existing visas.
About the job
Own application-layer security for Turquoise’s platform by building security scanning and guiding engineering teams to identify, prioritize, and remediate vulnerabilities.
What you'll do
- Build and tune application security scanning, triage findings, and track remediation through closure.
- Partner with engineering on secure design, code fixes, threat modeling, and secure-coding standards.
- Support application-security incident response, coordinate penetration tests, and report security metrics.
What they ask for
- 5+ years of experience in application security, security engineering, or a related software engineering role with a security focus.
- Hands-on experience with SAST, DAST, and dependency/SCA scanning tools.
- Deep understanding of common vulnerability classes, including ability to review code and architecture and propose fixes.
- Experience with cloud environments and securing modern CI/CD pipelines.
Nice to have
- Experience in healthcare, fintech, or another regulated industry; or with compliance frameworks such as HIPAA, SOC 2, or GDPR.
- Security certifications such as OSCP, GWAPT, or CSSLP; AppSec program development, scripting, automation, or red team experience.
Pay
$172K – $200K USD base salary
Tools
SAST, DAST, dependency/SCA, AWS, CI/CD, Python, Go, Terraform
Model-written summary · the original posting is authoritative