heartflowinc
Application Security Engineer
At a Glance
- Location
- San Francisco, California, United States
- Experience
- 5+ years
- Compensation
- salary compensation range is $145,000 to $180,000 per year, bonus, and equity.
- Posted
- 2026-07-14T16:42:11-04:00
Key Requirements
Required Skills
Domain Knowledge
- Education
Requirements
Security Communication
– Experience writing and maintaining code in at least one modern programming language and with at least one scripting language (Heartflow uses C++/Python).
Comfortable with testing frameworks and CI/CD pipelines.
AI Development Tools
– Experience using AI code tools such as Claude Code and Github Copilot for development and security testing.
Have contributed to secure SDLC activities, including threat modeling, code review, security testing and vulnerability management.
Responsibilities
Partner with the engineering team to provide hands-on technical guidance to software developers throughout the vulnerability remediation lifecycle.
Perform secure code reviews, validate false positive determinations, coach developers on effective remediation strategies, threat model our products and carry out essential parts of a secure SDLC.
Drive vulnerability identification using SAST, DAST, SCA and in-house AI tooling and manage external penetration testing.
Support engineering team on vulnerability management, including risk assessment, remediation, improving identification of vulnerabilities and translate security and privacy requirements into technical requirements.
Build security awareness through training on secure coding practices, security standards and latest security threats.