TherapyNotes, LLC
TherapyNotes, LLC
TherapyNotes, LLC psixologlar, terapevtlar, psixiatrlar va ijtimoiy xodimlarni o‘z ichiga olgan xulq-atvor salomatligi mutaxassislari uchun amaliyotni boshqarish dasturlarini ishlab chiqadi. Uning integratsiyalashgan platformasi rejalashtirish, telemeditsina, elektron tibbiy yozuvlar, hisob-kitob va mijozlar portali vositalarini birlashtirib, ruhiy salomatlik amaliyotlariga klinik hamda ma’muriy ishlarni yagona xavfsiz tizimda boshqarishga yordam beradi. Kompaniya mijozlarni qo‘llab-quvvatlash xizmatini dasturiy ta’minotdan foydalanadigan mutaxassislarning fikr-mulohazalari asosida olib boriladigan mahsulotni uzluksiz rivojlantirish bilan uyg‘unlashtiradi.

Cybersecurity Engineer, Application Security (Pennsylvania Remote)

Secure TherapyNotes’ behavioral health SaaS applications throughout the SDLC and CI/CD pipelines. Lead vulnerability management, cloud security, and healthcare compliance efforts.

Tavsif

  • Lead application security throughout the software development lifecycle and CI/CD pipeline
  • Work with development teams to embed security practices throughout the SDLC and CI/CD workflows
  • Apply secure coding standards and practices that safeguard customer data confidentiality, integrity, and availability
  • Conduct security assessments, code reviews, and threat modeling exercises
  • Manage GitHub Advanced Security and investigate code, secret, and dependency-scanning findings
  • Analyze recurring vulnerability trends and propose organization-wide remediation approaches
  • Expand scanning coverage while refining security configurations and workflows
  • Protect CI/CD pipelines and GitHub Actions by securing identities, runners, permissions, and secrets
  • Limit software supply-chain exposure through action reviews, dependency controls, action pinning, and artifact provenance
  • Assess Terraform and other infrastructure-as-code for security weaknesses
  • Work with IT platform teams to advance IaC scanning and secure deployment practices
  • Map application security controls to HIPAA, HITRUST, and HITECH requirements and assist with recurring audits
  • Partner with developers to resolve vulnerabilities through effective patching or mitigation
  • Build, deploy, and maintain SAST, DAST, and vulnerability management solutions
  • Assist with application security incident response, root-cause analysis, and remediation planning
  • Help deliver secure-coding awareness initiatives for development teams
  • Support wider security engineering activities spanning vulnerability management, incident response, and identity and access security

Talablar

  • A bachelor’s degree in information security, computer science, or a related discipline is preferred, though equivalent experience may be considered
  • At least five years of experience in application security or security engineering
  • Hands-on experience securing CI/CD pipelines and GitHub Actions, including SAST and DAST, code/secret/dependency finding triage, runner and workflow permissions, and third-party action supply-chain risks
  • Experience identifying security misconfigurations in Terraform or other infrastructure-as-code
  • Working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert investigation
  • Understanding of Zero Trust architecture and its application to application security and identity access
  • Strong knowledge of HIPAA, HITECH, and HITRUST requirements as they affect application security
  • Experience with API security, especially integrations involving other healthcare systems
  • Previous experience securing cloud environments; Azure is preferred and AWS is advantageous
  • Availability to participate in an incident response on-call rotation
  • Certifications such as GWAPT, OSWE, GPEN, or Azure/AWS cloud security credentials are desirable; CISSP or HCISPP is a plus but does not replace hands-on tooling experience
  • Familiarity with HL7 or comparable healthcare data standards is preferred

Imtiyozlar

  • Employer-funded health, dental, vision, life, and disability coverage
  • Retirement plan featuring a company contribution
  • Annual company profit-sharing program
  • Budget for personal development and professional training
  • Collaborative and open workplace culture
  • Structured two-week onboarding program
  • Comprehensive mentorship program

O‘xshash ish o‘rinlari

Advocate Aurora Health

Remote Social Media and Communications Intern

Advocate Aurora Health

Create social content, campaigns, and external communications while supporting Advocate Aurora Health’s reputation and visibility. This remote internship offers hands-on work across digital content, public relations, and healthcare communications.

Ochish
Enlight Renewable Energy Ltd (ENLT)

Director of Engineering, Renewable Energy

Enlight Renewable Energy Ltd (ENLT)

Lead engineering for Enlight’s solar, wind, and battery storage projects, setting technical standards and guiding teams across the project lifecycle. The role covers optimization, due diligence, procurement support, and engineering leadership across Europe.

Ochish
General Dynamics Information Technology

Senior AI Autonomy Engineering SME, UAS and Drone Swarming

General Dynamics Information Technology

Lead the design of autonomous UAS, drone swarms, and command-and-control solutions for defense missions. Advance AI and machine learning capabilities across Department of Defense environments.

Ochish