Log In
Sign Up
Job Description:
We are seeking an Application Security Engineer III to join our Security Engineering team! We seek highly collaborative candidates passionate about keeping our applications safe and secure. Your primary objective will be to ensure Phreesia is meeting Secure Software Development Life Cycle and working with development teams in our highly collaborative environment. (Did we mention “highly collaborative”?) Additionally, you will integrate security solutions across other teams within our company and support compliance, vulnerability management, and security management efforts.
We subscribe to newer principles of application design and by extension newer principles of securing the environment. We speak fluent 12 factor app and understand that the technical world is headed toward an “everything as code” nexus. The continuous delivery model, infrastructure as code, and slowly approaching serverless world energizes us to build things from inception with deep-rooted security principles and design. We are preparing for this and working diligently internally to help our engineering colleagues plan, prepare, execute, and embrace the “new world.”
You will work deeply on application and network security, vulnerability identification, remediation, and deterrence. You’ll build and understand threat models in our release pipelines and runtime as well as seek deep understanding in our application code and the Phreesia application itself.
The Phreesia offering spans a very wide array of technologies including (to name a few – Classic web applications, Android and hardware builds, Credit Card Security and HSMs, Classic Datacenters and the Cloud). Phreesia operates in an interesting compliance space that includes both healthcare and card compliance that will help to make this role a constantly creative one.
What You’ll Do:
- Support and improve existing threat modeling, security reviews (including manual code reviews), security architecture analysis processes in Phreesia.
- Hands on experience with application security domains such as web, devices (mobile and tablets) and backend platforms.
- Help Phreesia design and scale security projects like SAST, DAST, WAF, etc.
- Review our most critical applications and their technology stack from the ground up.
- Support compliance programs like SOC2, PCI, SOX, and HITRUST certifications in Phreesia.
- Support vulnerability management program in Phreesia.
- Participate in our internal vendor review assessment process.
- Help development teams in meeting security requirements through security consultations.
What You’ll Bring:
- 3+ years of experience in software development, information security, cloud security or information technology, with at least 2+ years of experience in security.
- Working knowledge of the OWASP top ten exploitation paths and control mitigations to protect against them.
- Experience with performing security reviews for web, devices (mobile and tablet) and backend applications.
- Experience in performing network and application penetration testing.
- Nice to have: Hands on experience with implementing security solutions in at least one cloud service provider (AWS, Azure or GCP), a general understanding of old and new development patterns: Release cycles, CI/CD, Code check-in and review, knowledge of microservices oriented architecture, experience with at least one Infrastructure-as-code language like Ansible, Terraform, etc.
Who We Are:
At Phreesia, we’re looking for smart and passionate people to help drive our mission of creating a better, more engaging healthcare experience. We’re committed to helping healthcare organizations succeed in an ever-evolving landscape by transforming the way healthcare is delivered. Our SaaS platform digitizes appointment check-in and offers tools to engage patients, improve efficiency, optimize staffing, and enhance clinical care.
Phreesia cares about our employees by providing a diverse and dynamic work environment. We’re a five-time winner of Modern Healthcare Magazine’s Best Places to Work in Healthcare award and we’ve been recognized on the Bloomberg Gender Equality Index. We are dedicated to continuously improving our employee experience by launching new programs and initiatives. If you thrive in a culture of recognition, value inclusivity, professional development, and growth opportunities, Phreesia could be a great fit!
Top-rated Employee Benefits:
- Remote First: 100% Remote work + home office expense reimbursements+ monthly allowance for cell phone, internet and wellness.
- Top of market rewards: Competitive compensation + equity grants for all employees
- Take time when you need time: Unlimited PTO + company holidays
- Top class healthcare benefits: Variety of healthcare benefits for you and your family (and your pets!) starting day one
- Care about your families: Generous top-up for parental leave benefits
- Support personal development: Continuing education and professional certification reimbursement
- Connecting in person: Various offsite events and activities for team to connect and meet in person, to support team building and engagement.
- Giveback to community: Local in-person volunteer events, and give back programs to our communities.
- Recognition and perks: We have a company wide recognition tool (Phireworks) to celebrate milestones, recognize achievements and strengthen your bond with your teams. You can accumulate points and redeem them for a wide catalogue of items!
- Diversity and inclusive environment: At Phreesia, all employees are encouraged to bring their authentic self to work, feel supported and perform at their best. We have a variety of Employee Resources Groups (ERGs) which bring together individuals from a wide range of backgrounds, experiences and perspectives, and seek to foster a sense of shared community and empowerment for employees who share a common social identity, such as gender, race, ethnicity, and sexual orientation.
We strive to provide a diverse and inclusive environment and are an equal opportunity employer.
Job Type: Full-time
