Note: The job is a remote job and is open to candidates in USA. Counterpart Health is transforming healthcare through its AI-enabled primary care tool, Counterpart Assistant, which supports physicians in improving patient care. The Senior Application Security Engineer will lead hands-on offensive security efforts, identify and remediate vulnerabilities, protect patient health information, strengthen platform resilience, and improve secure development practices across the engineering organization.
Responsibilities
- Actively hunt for and close security vulnerabilities across our core product, Counterpart Assistant. You will use a variety of different tools and scripts you write yourself to map a real attack
- Harden the systems, services, and endpoints around the platform. Establish strong security monitoring of our services and stack
- Safeguard PHI and monitor deidentification practices. Find the paths where protected data could leak and close them
- Use AI as a force multiplier for finding gaps; using agents and frameworks that scale vulnerability discovery, with guardrails you set. You will also help the engineering org build safely as the threat landscape around AI keeps moving
- Raise the bar for others. Review critical pull requests across every team, run security training, and mentor engineers whose secure coding needs work
- Partner with site reliability engineering, engineering leadership, and corporate security teams to establish defensive strategies to safeguard our data
- Strengthen our resilience and ensure disaster recovery is strong
Skills
- You have 8+ years in software engineering and 4+ years focused on application security, vulnerability research, and penetration testing
- You have demonstrated the ability to identify vulnerabilities with custom tooling you've built
- You have been using AI to find vulnerabilities continuously in your day to day work. You know a range of tools, agents, and frameworks to drive impact with AI. But you also know where the guardrails go
- You can write code anywhere throughout the stack. Comfortable with a number of different programming languages
- You balance security against what engineers, clinicians, and operators actually need, and you measure yourself on results rather than policies
- You have mentored engineers into better security practices and want to keep doing it
- You work on software that touches patient care changes how you think about risk
Benefits
- Equity opportunities
- A performance-based bonus program
- 401k matching
- Regular compensation reviews
- Comprehensive medical, dental, and vision coverage for employees and their families
- No-Meeting Fridays
- Monthly company holidays
- Access to mental health resources
- A generous flexible time-off policy
- Remote-first culture that supports collaboration and flexibility, allowing team members to thrive from any location
- Learning programs
- Mentorship
- Professional development funding
- Regular performance feedback and reviews
- Employee Stock Purchase Plan (ESPP) offering discounted equity opportunities
- Reimbursement for office setup expenses
- Monthly cell phone & internet stipend
- Remote-first culture, enabling collaboration with global teams
- Paid parental leave for all new parents
Company Overview