# Senior Security Engineer, Product Security

**Company**: Komodo Health
**Location**: United States
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $200,000-$245,000 USD
**Category**: Security
**Industry**: Healthcare

**Apply**: https://job-boards.greenhouse.io/komodohealth/jobs/8929044002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ac60d3c1-1c2

## Description

At Komodo Health, our mission is to reduce the global burden of disease through smarter use of data.

The Security team protects Komodo Health's data, platform, and people. As a Senior Security Engineer in Product Security, you will own the security of how Komodo builds, ships, and deploys software, focusing on GitHub, CI/CD pipelines, SAST, SCA, DAST, and AI features.

Key accomplishments in your first 12 months will include:

- Establishing a trusted, scalable security-testing path across Komodo's products and repositories

- Strengthening Komodo's software supply chain and delivery practices

- Establishing practical security patterns and guardrails for AI-enabled products and AI-assisted engineering workflows

- Reducing confirmed, exploitable risk across products

Responsibilities:

- Own the application security toolchain (SAST, SCA, container and secret scanning, DAST)

- Build security automation in Python or TypeScript and GitHub Actions

- Run threat models and design reviews for new services and AI features

- Improve how Security engages across the product lifecycle

- Reduce engineering friction and ensure sufficient engineering capacity for timely security remediation

- Scope penetration tests, validate findings, and verify fixes

- Evaluate AI security tooling and coach engineers on secure LLM patterns

- Keep SDLC and vulnerability management controls audit-ready for SOC 2

Requirements:

- 6+ years in software or security engineering, with 3+ years in application or product security

- Hands-on experience with GitHub Actions, SAST, SCA, penetration testing, and DAST

- Experience with AI security, threat modeling, and cloud security

- Strong partnership and communication skills

Nice to have:

- Experience with AI agents for security work

- Background in bug bounty programs or open-source security tools

- SOC 2 experience with SDLC and vulnerability management controls

- Certifications in application security or cloud security

The pay range for this role is:

- San Francisco Bay Area and New York City: $200,000-$245,000 USD

- All Other US Locations: $174,000-$215,000 USD

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- GitHub Actions
- SAST
- SCA
- penetration testing
- DAST
- AI security
- threat modeling
- cloud security
- Python
- TypeScript

### Nice to have
- AI agents for security work
- bug bounty background
- open-source security tools
- SOC 2 experience
- application security certifications

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/komodohealth/jobs/8929044002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)