Zocdoc Jobs Application Security Engineer

Zocdoc

Application Security Engineer

Posted 24 Days Ago Easy Apply Remote or Hybrid Hiring Remotely in USA 100K-140K Annually Mid level Easy Apply Remote or Hybrid Hiring Remotely in USA 100K-140K Annually Mid level Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows. The summary above was generated by AI

Our Mission

Healthcare should work for patients, but it doesn’t. In their time of need, they call down outdated insurance directories. Then wait on hold. Then wait weeks for the privilege of a visit. Then wait in a room solely designed for waiting. Then wait for a surprise bill. In any other consumer industry, the companies delivering such a poor customer experience would not survive. But in healthcare, patients lack market power. Which means they are expected to accept the unacceptable.

Zocdoc’s mission is to give power to the patient. To do that, we’ve built the leading healthcare marketplace that makes it easy to find and book in-person or virtual care in all 50 states, across +200 specialties and +12k insurance plans. By giving patients the ability to see and choose, we give them power. In doing so, we can make healthcare work like every other consumer sector, where businesses compete for customers, not the other way around. In time, this will drive quality up and prices down. 

We’re 18 years old and the leader in our space, but we are still just getting started. If you like solving important, complex problems alongside deeply thoughtful, driven, and collaborative teammates, read on.

Your Impact to our Mission

Zocdoc’s most important asset is our people. As an Application Security Engineer, you’ll play a meaningful role in helping our development organization build secure software with confidence. In this role, you’ll work closely with our Compliance, Security, and Engineering teams to support our secure software development lifecycle, strengthen application security governance, and help shape emerging AI governance guardrails across the business.

You'll enjoy this role if you...

• Personally motivated by helping teams build secure software and reduce risk before issues reach production.
• Autonomous, urgent, and creative. You genuinely love turning security requirements into practical guidance for developers.
• Highly collaborative and energized by partnering with engineering squads across the software development lifecycle.
• Passionate about application security, secure coding, and improving how teams work within modern development environments.
• A clear communicator who can make security concepts approachable and actionable for technical partners.
• The kind of person who is excited by emerging technology trends, especially AI security risks and automated workflows.
• Serious about your work, but not about yourself.

Your day to day is...

• Serving as an accessible point of contact for engineering squads, helping teams understand and follow secure development lifecycle guidelines.
• Assisting developers in reviewing and interpreting alerts from static analysis and software composition analysis tools, including helping distinguish true vulnerabilities from false positives.
• Providing clear, actionable guidance on remediating common application security vulnerabilities, including issues aligned to the OWASP Top 10.
• Helping maintain internal security documentation, developer playbooks, and secure coding training materials so that compliance expectations are clear and achievable.
• Supporting application security governance by tracking key security milestones and organizing technical evidence from repositories and deployment pipelines for compliance audits.
• Monitoring application security metrics, including vulnerability patch timelines and policy exceptions, to support regular leadership reporting.
• Working with cutting-edge GenAI tools and technology while supporting AI governance frameworks and helping ensure AI-enabled workflows align with privacy and security guardrails.

You’ll be successful in this role if you have…

• Meaningful experience in an information security role, software engineering position, or IT audit function with an application security focus.
• A foundational understanding of software development processes and how security fits into agile environments.
• Familiarity with code review concepts and comfort reading at least one major language used in cloud environments, such as Python, JavaScript, Go, or Java.
• Basic exposure to cloud environments such as AWS, GCP, or Azure, along with an understanding of Git workflows.
• A conceptual understanding of vulnerability categories and web application security standards.
• An interest in emerging technology trends, especially AI security risks and automated workflows.
• Required: the ability to integrate generative AI tools into daily workflows to automate tasks, foster innovation, and maximize productivity.
• A degree in Computer Science, Cybersecurity, or a related technical field is preferred, though equivalent hands-on experience or certifications such as Security+, GSEC, or CEH are also highly valued.
• Superb communication skills, humility, and a collaborative approach to supporting stakeholders across engineering and security.

Benefits

• Flexible work environment
• Unlimited Vacation
• 100% paid employee health benefit options (including medical, dental, and vision)
• 401(k) with employer funded match
• Corporate wellness program with Wellhub
• Sabbatical leave (for employees with 5+ years of service)
• Competitive paid parental leave and fertility/family planning reimbursement
• Cell phone reimbursement
• Employee Resource Groups and ZocClubs to promote shared community and belonging
• Great Place to Work Certified

Zocdoc is committed to fair and equitable compensation practices. Salary ranges are determined through alignment with market data. Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills. Certain positions are also eligible for variable pay and/or equity; your recruiter will discuss the full compensation package details.NYC Base Salary Range$100,000—$140,000 USD

About us
Zocdoc is the country’s leading digital health marketplace that helps patients easily find and book the care they need. Each month, millions of patients use our free service to find nearby, in-network providers, compare choices based on verified patient reviews, and instantly book in-person or video visits online. Providers participate in Zocdoc’s Marketplace to reach new patients to grow their practice, fill their last-minute openings, and deliver a better healthcare experience. Founded in 2007 with a mission to give power to the patient, our work each day in pursuit of that mission is guided by our six core values. Zocdoc is a private company backed by some of the world’s leading investors, and we believe we’re still only scratching the surface of what we plan to accomplish. 

Zocdoc is a mission-driven organization dedicated to building teams as diverse as the patients and providers we aim to serve. In the spirit of one of our core values - Together, Not Alone, we are a company that prides itself on being highly collaborative, and we believe that diverse perspectives, experiences and contributors make our community and our platform better.  We’re an equal opportunity employer committed to providing employees with a work environment free of discrimination and harassment. Applicants are considered for employment regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity, gender expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or any other class protected by applicable laws.
Job Applicant Privacy Notice

HQ

Zocdoc New York, New York, USA Office

568 Broadway, New York, NY, United States, 10012

Similar Jobs at Zocdoc

Zocdoc

Director, Marketing Data Science

7 Days Ago Easy Apply Remote or Hybrid New York, NY, USA Easy Apply 220K-300K Annually Senior level 220K-300K Annually Senior levelHealthtech • Information Technology • Software • TelehealthLead and build a greenfield marketing measurement function across B2C and B2B. Own attribution, incrementality, MMM, MTA, LTV, and experimentation; hire and mentor data scientists; partner with marketing leadership to turn statistical results into investment decisions; integrate measurement with data platform and GenAI tools.Top Skills: Causal InferenceGenaiGeo-Based Holdout TestsIncrementality TestingLtv ModelingMedia Mix Modeling (Mmm)Multi-Touch Attribution (Mta) Zocdoc

Director, Health Systems Sales

8 Days Ago Easy Apply Remote or Hybrid USA Easy Apply 170K-235K Annually Senior level 170K-235K Annually Senior levelHealthtech • Information Technology • Software • TelehealthLead and develop an enterprise sales team to acquire, grow, and retain health system customers. Build commercial strategy, coach sellers on account planning and negotiations, drive data-informed revenue growth, recruit and retain sales talent, and align cross-functional teams to scale repeatable processes and improve customer outcomes. Zocdoc

Specialist, Customer Experience

13 Days Ago Easy Apply Remote or Hybrid USA Easy Apply 21-26 Annually Entry level 21-26 Annually Entry levelHealthtech • Information Technology • Software • TelehealthProvide best-in-class customer service to healthcare provider accounts via phone, email, and chat. Resolve issues, upsell platform features, maintain accurate interaction records, and drive provider engagement by demonstrating Zocdoc's value.

What you need to know about the NYC Tech Scene

As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.

Key Facts About NYC Tech

• Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
• Key Industries: Artificial intelligence, Fintech
• Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
• Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
• Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory