Senior Software Engineer, Security

Responsibilities

• Design and build secure systems across APIs, EHR integrations, payments infrastructure, and SaaS products
• Lead threat modeling and security design reviews for new features
• Identify and remediate vulnerabilities in application code, dependencies, and infrastructure
• Improve authentication, authorization, and access control systems (OAuth, RBAC, service-to-service auth)
• Integrate and maintain security tooling in CI/CD pipelines including SAST, DAST, and dependency scanning
• Contribute to secure coding standards and developer-facing security frameworks
• Support HIPAA and SOC 2 compliance through system design and documentation

Requirements

• 5+ years of software engineering experience
• 1–3+ years focused on application or product security
• Experience building and securing backend systems in Python, Go, Java, or similar
• Solid understanding of OWASP Top 10 vulnerabilities and mitigations
• Hands-on experience with OAuth 2.0, JWT, and RBAC
• Experience working in AWS or Google Cloud environments
• Familiarity with SAST, DAST, and dependency scanning tools
• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience

Benefits

• Full Medical, Dental, and Vision (up to 100% covered)
• 401K and commuter benefits
• Flexible PTO
• Stock options

About the Company

NexHealth is building the infrastructure layer for modern healthcare, connecting fragmented EHR systems into a single platform that powers software, APIs, payments, and patient experiences.