Security Engineer - Application Security

This a Full Remote job, the offer is available from: Europe Neko Health is a Swedish healthcare technology company co-founded in 2018 by Hjalmar Nilsonne and Daniel Ek. Neko's vision is to shift healthcare from reactive treatment toward preventative health and early detection. This requires completely reimagining the patient's experience and incorporating the latest advances in sensors and AI. Neko Health has developed a new medical scanning technology concept to make it possible to do broad and non-invasive health data collection that is convenient and affordable for the public. The company is based in Stockholm, offering the Neko Body Scan experience at locations in Stockholm, London and Manchester, with over 500 employees. About the role We are looking for a Security Engineer with a primary focus on application security to strengthen our software security posture. You will lead secure development practices, integrate security tools into CI/CD pipelines, and partner with developers to reduce vulnerabilities. This role ensures our applications meet the highest security standards in a regulated healthcare environment.

Responsibilities

• Drive Secure Software Development Lifecycle (SSDLC) adoption across teams.
• Perform code reviews and vulnerability assessments for critical applications.
• Integrate and manage SAST/DAST/SCA tools in CI/CD pipelines.
• Conduct threat modelling for new features and products.
• Collaborate with developers to remediate vulnerabilities and improve secure coding practices.
• Produce audit-ready evidence for compliance frameworks.

Requirements

• Strong knowledge of application security principles and OWASP Top 10.
• Experience with secure coding practices and developer enablement.
• Hands-on experience with SAST/DAST/SCA tools.
• Familiarity with CI/CD security integration.
• Understanding of compliance frameworks (ISO 27001, NIST CSF, HIPAA). About the Engineering Team

Distributed and Remote First We are nearly 100 full time engineers at the company, working from Berlin, Chamonix, Hamburg, Lisbon, Marseille, Vilnius, and Stockholm, spanning diverse disciplines such as Hardware Engineering, Firmware Development, Electrical Design, Algorithm Development, Machine Learning Development, Optronics Research, Frontend Development and more. We don't expect people to join us with a specific tech knowledge, but we do expect you to work with our tools. We use a mix of React, Typescript, C++, and Python. Our APIs are written in C# with ASP.NET Core, uses Azure Cosmos DB, and Azure Active Directory for authentication. Our headquarters and our hardware development team are in Stockholm, Sweden. We are a Remote First company; however, it is of course much easier to work remotely as a software engineer than a hardware or firmware engineer (since they require access to hardware or devices occasionally). Software engineers based in Stockholm work maybe one day a week or one day every two weeks from the office. We meet a couple of times per year to get to know each other and have fun. Organization and Way of Working The engineering team is divided into smaller cross functional project teams that each focus on a specific goal or target, where some groups are long-lived, and some are short-lived, depending on how big the goal or deliverable is. We strive to create groups which are cross-functional and able to complete their goals without dependence on other teams, even though this is of course not always possible. Groups track goals on a yearly and quarterly basis with goal follow-up across the entire engineering organization on a bi-weekly basis. Most groups do internal planning on a bi-weekly basis, but in the end it's up to the group to decide how they want to work. We have, however, mandated that all groups must present their progress or failures or hacks at our bi-weekly engineering demo, a fun meeting/presentation where we talk about everything from short-circuiting power-modules, how hard it is to calibrate cameras or align polygons in space, to neat new command line tools for operations, a new auth mechanism in the backend, a cool new way to visualize health data or a new feature which helps our doctors be more productive. We have a flexible workplace that focuses on work/life balance, and we strongly believe in our mission but do not think that achieving it requires sacrificing everything else. This offer from "Neko Health" has been enriched by Jobgether.com and got a 77% flex score. Apply tot his job Apply To this Job