高级应用安全工程师
Senior Application Security Engineer
在 Counterpart Health，我们通过创新的初级护理工具 Counterpart Assistant 正在改变医疗保健并提升患者护理质量。通过支持初级护理医生（PCPs），我们能够通过早期诊断和慢性病的纵向护理管理，以更低的成本为患者提供更好的治疗结果。
我们正在寻找一名高级应用安全工程师，在其他人之前发现 Counterpart Assistant 的漏洞。这是一个实战型的进攻性安全角色，属于 Eng Core 团队，该团队负责平台的基础工作。你将针对数千名从业者在实时患者就诊中使用的软件进行漏洞挖掘，修复你发现的问题，并提高你周围每位工程师的安全标准。
**作为高级应用安全工程师，你将：**
- 积极在我们的核心产品 Counterpart Assistant 中发现并修复安全漏洞。你将使用自己编写的多种工具和脚本来模拟真实攻击。
- 加固平台周围的系统、服务和端点。建立对我们的服务和技术栈的强安全监控。
- 保护受保护健康信息（PHI）并监控去标识化实践。找到受保护数据可能泄露的路径并加以修复。
- 利用人工智能作为发现漏洞的放大器；使用可扩展漏洞发现的代理和框架，同时设置好防护措施。你还将帮助工程团队在人工智能威胁不断变化的背景下安全地构建系统。
- 提升他人的标准。审查每个团队的关键拉取请求，开展安全培训，并指导需要改进安全编码的工程师。
- 与站点可靠性工程、工程领导和企业安全团队合作，制定防御策略以保护我们的数据。
- 增强我们的弹性，确保灾难恢复机制强大可靠。
**如果你具备以下条件，请联系我们：**
- 具有 8 年以上软件工程经验，其中 4 年以上专注于应用安全、漏洞研究和渗透测试。
- 有通过自己构建的定制工具识别漏洞的经验。
- 在日常工作中持续使用人工智能发现漏洞。你了解一系列工具、代理和框架，可以利用人工智能产生影响。但你也知道防护措施应该放在哪里。
- 能够在堆栈的任何地方编写代码。熟悉多种编程语言。
查看英文原文
At Counterpart Health, we are transforming healthcare and improving patient care with our innovative primary care tool, Counterpart Assistant. By supporting Primary Care Physicians (PCPs), we are able to deliver improved outcomes to our patients at a lower cost through early diagnosis and longitudinal care management of chronic conditions.
We are looking for a Senior Application Security Engineer to break Counterpart Assistant before anyone else does. This is a hands-on offensive security role on our Eng Core team, the group responsible for foundational work across the platform. You will hunt for vulnerabilities in software that thousands of practitioners use during live patient visits, close the gaps you find, and raise the security floor of every engineer around you.
**As a** **Senior Application Security Engineer,** **you will:**
- Actively hunt for and close security vulnerabilities across our core product, Counterpart Assistant. You will use a variety of different tools and scripts you write yourself to map a real attack.
- Harden the systems, services, and endpoints around the platform.Establish strong security monitoring of our services and stack.
- Safeguard PHI and monitor deidentification practices. Find the paths where protected data could leak and close them.
- Use AI as a force multiplier for finding gaps; using agents and frameworks that scale vulnerability discovery, with guardrails you set. You will also help the engineering org build safely as the threat landscape around AI keeps moving.
- Raise the bar for others. Review critical pull requests across every team, run security training, and mentor engineers whose secure coding needs work.
- Partner with site reliability engineering, engineering leadership, and corporate security teams to establish defensive strategies to safeguard our data.
- Strengthen our resilience and ensure disaster recovery is strong.
**You should get in touch if:**
- You have 8+ years in software engineering and 4+ years focused on application security, vulnerability research, and penetration testing.
- You have demonstrated the ability to identify vulnerabilities with custom tooling you’ve built.
- You have been using AI to find vulnerabilities continuously in your day to day work. You know a range of tools, agents, and frameworks to drive impact with AI.But you also knowwhere the guardrails go.
- You can write code anywhere throughout the stack.Comfortable with a number of different programming languages.
- You balance security against what engineers, clinicians, and operators actually need, and you measure yourself on results rather than policies.
- You have mentored engineers into better security practices and want to keep doing it.
- You work on software that touches patient care changes how you think about risk.
* * *
**Benefits Overview**:
- **Financial Well-Being**: Our commitment to attracting and retaining top talent begins with a competitive base salary and equity opportunities. Additionally, we offer a performance-based bonus program, 401k matching, and regular compensation reviews to recognize and reward exceptional contributions.
- **Physical Well-Being**: We prioritize the health and well-being of our employees and their families by providing comprehensive medical, dental, and vision coverage. Your health matters to us, and we invest in ensuring you have access to quality healthcare.
- **Mental Well-Being**: We understand the importance of mental health in fostering productivity and maintaining work-life balance. To support this, we offer initiatives such as No-Meeting Fridays, monthly company holidays, access to mental health resources, and a generous flexible time-off policy. Additionally, we embrace a remote-first culture that supports collaboration and flexibility, allowing our team members to thrive from any location.
- **Professional Development**: Developing internal talent is a priority for Clover. We offer learning programs, mentorship, professional development funding, and regular performance feedback and reviews.
_Additional Perks:_
- Employee Stock Purchase Plan (ESPP) offering discounted equity opportunities
- Reimbursement for office setup expenses
- Monthly cell phone & internet stipend
- Remote-first culture, enabling collaboration with global teams
- Paid parental leave for all new parents
- And much more!
* * *
**About Counterpart Health:** In 2018, Clover Health set out to do something unprecedented: build a clinically intuitive, AI-enabled solution that fits within physicians' workflows to help support the earlier diagnosis and management of chronic conditions.
Years later, that vision is a reality, with thousands of practitioners using Counterpart Assistant during patient visits to improve disease management, reduce medical expenses, and drive success in value-based care.
With an exceptional team of value-based care and technology experts, Counterpart Health is driving value-based care at the speed of software.
Counterpart Health is a subsidiary of Clover Health. From Clover’s inception, Diversity & Inclusion have always been key to our success. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences, perspectives, opinions, and backgrounds, who share a passion for improving people's lives. Diversity not only includes race and gender identity, but also age, disability status, veteran status, sexual orientation, religion and many other parts of one’s identity. All of our employee’s points of view are key to our success, and inclusion is everyone's responsibility.
* * *
#LI-Remote
_Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records._ _We are an [E-Verify](https://www.e-verify.gov/?utm_medium=search&utm_source=google&utm_campaign=everify2018&utm_content=bg_Branded_Everify_General_English_BMM_E_Verify&utm_keyword=everify) company._
Final pay is based on several factors including but not limited to internal equity, market data, and the applicant’s education, work experience, certifications, etc.
A reasonable estimate of the base salary range for this role is:
$169,000—$220,000 USD