Senior Application Security Engineer

Role Description

We are looking for a Senior Application Security Engineer to break Counterpart Assistant before anyone else does. This is a hands-on offensive security role on our Eng Core team, the group responsible for foundational work across the platform. You will hunt for vulnerabilities in software that thousands of practitioners use during live patient visits, close the gaps you find, and raise the security floor of every engineer around you.

As a Senior Application Security Engineer, you will:

• Actively hunt for and close security vulnerabilities across our core product, Counterpart Assistant.
• Use a variety of different tools and scripts you write yourself to map a real attack.
• Harden the systems, services, and endpoints around the platform.
• Establish strong security monitoring of our services and stack.
• Safeguard PHI and monitor deidentification practices.
• Find the paths where protected data could leak and close them.
• Use AI as a force multiplier for finding gaps; using agents and frameworks that scale vulnerability discovery, with guardrails you set.
• Help the engineering org build safely as the threat landscape around AI keeps moving.
• Raise the bar for others by reviewing critical pull requests across every team, running security training, and mentoring engineers whose secure coding needs work.
• Partner with site reliability engineering, engineering leadership, and corporate security teams to establish defensive strategies to safeguard our data.
• Strengthen our resilience and ensure disaster recovery is strong.

Qualifications

• 8+ years in software engineering and 4+ years focused on application security, vulnerability research, and penetration testing.
• Demonstrated ability to identify vulnerabilities with custom tooling you’ve built.
• Experience using AI to find vulnerabilities continuously in your day-to-day work.
• Knowledge of a range of tools, agents, and frameworks to drive impact with AI.
• Ability to write code anywhere throughout the stack.
• Comfortable with a number of different programming languages.
• Balance security against what engineers, clinicians, and operators actually need.
• Measure yourself on results rather than policies.
• Experience mentoring engineers into better security practices.
• Work on software that touches patient care changes how you think about risk.

Benefits

• Competitive base salary and equity opportunities.
• Performance-based bonus program, 401k matching, and regular compensation reviews.
• Comprehensive medical, dental, and vision coverage.
• No-Meeting Fridays and monthly company holidays.
• Access to mental health resources and a generous flexible time-off policy.
• Remote-first culture that supports collaboration and flexibility.
• Learning programs, mentorship, professional development funding, and regular performance feedback and reviews.
• Employee Stock Purchase Plan (ESPP) offering discounted equity opportunities.
• Reimbursement for office setup expenses.
• Monthly cell phone & internet stipend.
• Paid parental leave for all new parents.
• And much more!

Company Description

In 2018, Clover Health set out to do something unprecedented: build a clinically intuitive, AI-enabled solution that fits within physicians' workflows to help support the earlier diagnosis and management of chronic conditions. Years later, that vision is a reality, with thousands of practitioners using Counterpart Assistant during patient visits to improve disease management, reduce medical expenses, and drive success in value-based care.

With an exceptional team of value-based care and technology experts, Counterpart Health is driving value-based care at the speed of software.

Counterpart Health is a subsidiary of Clover Health. From Clover’s inception, Diversity & Inclusion have always been key to our success. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences, perspectives, opinions, and backgrounds, who share a passion for improving people's lives.