Senior Application Security Engineer
Heartflow
Make my CV for this job, freeView job and applyYour CV, rewritten for this role using only your real experience. Sign in with Google and upload your CV. Nothing to install.
Skills named in this job
Read from the description itself, not inferred.
This role on the market
1,267 open application roles across 221 companies are on ApplySarthi right now, most of them in Bengaluru (103), Hyderabad (74), Delhi NCR (62).
- APAC RCSC Application SpecialistRoche
- Staff Software Engineer, Web Application ServicesMozilla
- Sr. Developer - Application Development P 4BGenpact · bengaluru
- Application Security EngineerTeliogroup
- Application Security EngineerPokemoncareers
What application roles keep asking for: Python (13%) — counted across their open postings here.
Application Security Engineer jobs in the United States · Remote Application Security Engineer jobs · AWS jobs · Ansible jobs · C++ jobs · CI/CD jobs
Heartflow has 103 open roles listed here.
- Data Analyst
- Director, Customer Support
- Software Engineer – Frontend
- IT Director, Salesforce Platform Owner
- Territory Account Manager - Peoria, IL; Champaign, IL
Counted across 14 company job boards, updated as roles open and close.
Preparing for this interview
Interviews for application roles keep coming back to Python. Practise those questions before you sit with Heartflow.
Questions you are likely to be asked
- Why do you want to join Heartflow?
- What is your experience with AWS? Tell me one thing you learned the hard way.
- Tell me about an outage you handled. What did you learn from it?
- How do you decide what to monitor, and what should wake someone up at night?
- How would you cut the cloud bill of a system without hurting it?
Prep Sarthi gives you a free mock interview: an AI interviewer asks you questions like these out loud, from your own CV and this job, and shows your score and your weakest answer.
Practise the Senior Application Security Engineer at Heartflow interview free →Heartflow is a medical technology company advancing the diagnosis and management of coronary artery disease, the #1 cause of death worldwide, using cutting-edge technology. The flagship product—an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain Guidelines called the Heartflow FFRCT Analysis—provides a color-coded, 3D model of a patient’s coronary arteries indicating the impact blockages have on blood flow to the heart. Heartflow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway that helps clinicians identify stenoses in the coronary arteries (RoadMap™Analysis), assess coronary blood flow (FFRCT Analysis), and characterize and quantify coronary atherosclerosis (Plaque Analysis). Our pipeline of products is growing and so is our team; join us in helping to revolutionize precision heartcare.
Heartflow is a publicly traded company (HTFL) that has received international recognition for exceptional strides in healthcare innovation, is supported by medical societies around the world, cleared for use in the US, UK, Europe, Japan and Canada, and has been used for more than 750,000 patients worldwide.
We are looking for a Senior Application Security Engineer to work with our engineering team to ensure security is an integral part of our Software Development Lifecycle (SDLC). In this role, you’ll have the chance to use your security and software development background to protect patients as we build products that leverage AI to improve healthcare. If you enjoy working with talented engineers to solve complex technical challenges and want to see your work make a direct difference in patient outcomes, we encourage you to apply. This role is a hybrid, requiring three days a week in our San Francisco office.
What You’ll Do:
- Partner with the engineering team to provide hands-on technical guidance to software developers throughout the vulnerability remediation lifecycle. Perform secure code reviews, validate false positive determinations, coach developers on effective remediation strategies, threat model our products and carry out essential parts of a secure SDLC.
- Drive vulnerability identification using SAST, DAST, SCA and in-house AI tooling and manage external penetration testing.
- Support engineering team on vulnerability management, including risk assessment, remediation, improving identification of vulnerabilities and translate security and privacy requirements into technical requirements.
- Build security awareness through training on secure coding practices, security standards and latest security threats.
What You Bring:
- Security Communication – Ability to reason about risk in complex environments and communicate that risk to technical and non-technical audiences. Experience leading training, speaking internally/externally about security projects valued.
- Programming Skills – Experience writing and maintaining code in at least one modern programming language and with at least one scripting language (Heartflow uses C++/Python). Comfortable with testing frameworks and CI/CD pipelines.
- AI Development Tools – Experience using AI code tools such as Claude Code and Github Copilot for development and security testing.
- Education & Experience – BS in Computer Science (or related degree) or relevant certifications and equivalent experience. 5+ years of total experience with at least 1 year working in Application Security or performing security tasks in a development role.
- Securing SDLC – Have contributed to secure SDLC activities, including threat modeling, code review, security testing and vulnerability management.
- Knowledge of Modern AI Security Threats – Experience working with or ability to discuss current AI threats for both machine learning and generative AI.
What Helps You Stand Out:
- Healthcare Experience – Current knowledge of HIPAA, HITRUST and the complexities of working in a regulated environment. Experience with Software as a Medical Device (SaMD) is especially valuable.
- Infrastructure as Code & Cloud – Familiarity with AWS (or equivalent cloud providers) and configuration tools (Terraform, Chef, Ansible). Experience with containerization (Docker, Kubernetes) and orchestration (GitHub Actions or similar).
A reasonable estimate of the base salary compensation range is $165,000 to $200,000 per year, bonus, and equity. #LI-IB1
Match this job to your CV
ApplySarthi scores your CV against this role, shows the skills you are missing, and writes a tailored version for the application.
Check my match →Similar open roles
- Regional Business Manager - West Great LakesHeartflow
- Territory Account Manager - Indianapolis, INHeartflow
- Clinical Field Specialist, CT - TexasHeartflow
- Clinical Field Specialist, CT - West FloridaHeartflow
- Clinical Trial Manager - Investigator Initiated StudiesHeartflow
- Customer Success ManagerHeartflow
- Director, Clinical Quality & ComplianceHeartflow
- Director, Customer Support Heartflow
Need answers during your interview? Try Live Sarthi.
Live Sarthi, an Interview Sarthi app, shows answer suggestions during the call.
- Hidden from supported screen sharingThe overlay stays out of supported Windows screen captures.
- Answers start in about 1.5 secondsResponse time varies with your connection and model.
- From your own CVYour projects and your experience, not a generic script.
- 30 minutes freeThen ₹99 for a 2-day pass with unlimited calls — you pay for the days you are interviewing, not a subscription.
A Windows app, from the same team as ApplySarthi.
Listed on greenhouse · posted 2026-09-14. ApplySarthi collects openings and links to application pages; the role is advertised by Heartflow, not by us.