.jpg)
Easy Apply
Easy Apply
The Senior Application Security Engineer oversees application security, works on AI threat modeling, and collaborates with engineers to enhance security infrastructure and compliance with regulations.
ABOUT ARTERA
OUR APPROACH TO WORK LOCATIONWORKING AT ARTERA EQUAL EMPLOYMENT OPPORTUNITY (EEO) STATEMENT DATA PRIVACY SECURITY REQUIREMENTS
Our Mission: Make healthcare #1 in customer service.
What We Deliver: Artera is an agentic company strengthening how healthcare providers communicate and care for patients. As an agentic partner, we bring over a decade of healthcare experience to address urgent workflows from day one and build custom solutions as healthcare providers’ needs evolve. Trusted by 1,000+ specialties, FQHCs, health systems, and federal agencies, Artera strengthens and protects and enhances patient relationships across every interaction - from intake and scheduling to referral management, post-visit care, and more.
Hear from our CEO, Guillaume de Zwirek, about why we are standing at the edge of the biggest technological shift in healthcare’s history!
Our award-winning culture: Our award-winning culture: Since founding in 2015, Artera has consistently been recognized for its innovative technology, business growth, and named a top place to work. Examples of these accolades include: Inc. 5000 Fastest Growing Private Companies (2020, 2021, 2022, 2023, 2024); Deloitte Technology Fast 500 (2021, 2022, 2023, 2024, 2025); Built In Best Companies to Work For (2021, 2022, 2023, 2024, 2025, 2026). Artera has also been recognized by Forbes as one of “America’s Best Startup Employers,” Newsweek as one of the “World’s Best Digital Health Companies,” and named one of the top “44 Startups to Bet your Career on in 2024” by Business Insider.
Applicants must be currently authorized and have the ability to provide proof of full-time, long-term authorization to work in the United States. We are unable to provide visa sponsorship or support visa transfers now or in the future.
Responsibilities
- AI Threat Modeling: Threat-model agentic and LLM-powered features end-to-end: data ingress/egress, agent identity, tool-use boundaries, and the unique risks that come with frontier AI work
- Paved Road Tooling: Build the secure SDLC paved road — secure SDLC guardrails, prompt/agent identity patterns, secrets management, PHI/PII redaction patterns
- Security Gates: Embed SAST, DAST, SCA, and infrastructure scanning into CI/CD so security gates are part of the pipeline, not an afterthought
- AI Monitoring Strategy: Identify and pilot an AI monitoring tool to fill the gap our current tooling (Zscaler) doesn't cover
- Policy -> Practice: Translate existing security policy into safe tool-use patterns for the Artera Primitives team, Systems Engineers, and other AI Builder squads
- Cross Functional Partnership: Partner cross-functionally with DevOps, Systems Engineering, and the AI builder teams — meeting AI Builders and engineers in the middle and finding the secure path forward, not the "no" path
- Security Ownership: Own AWS identity and access management patterns, secrets management, and security tooling decisions in our AWS environment. Collaborate with System Engineers / DevOps on implementation.
- Security Framework Application: Apply frameworks like MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, and OWASP LLM Top 10 to architectural decisions.
Requirements
- AppSec Tenure: 6–10 years in Application Security, with a hands-on engineering orientation
- LLM & Agent Security: Demonstrable experience with LLM and agent security — OWASP LLM Top 10, MITRE ATLAS, prompt/output filtering, agent identity, and tool-use risk
- Threat Modeling Expertise: You’ve built end-to-end threat models for production platforms and translated them into corrective controls
- Pipeline Scanning Tools: SAST, DAST, and infrastructure scanning tools in production CI/CD environments
- Shift-Left Security Experience: Taking policy, codifying it as infrastructure-as-code (Terraform), and gating CI/CD pipelines on security findings
- Cloud Depth: Significant AWS experience (GCP or Azure background acceptable; AWS is learnable, but cloud depth is required)
- Regulated Environment Experience: Background in regulated environments — healthcare (HIPAA/HITRUST), federal (FedRAMP), or fintech (PCI)
- Collaborative Communicator: Strong cross-functional communicator;able to partner with engineers and AI builders, find the secure path together.
Bonus
- Agentic AI Modeling: Direct experience threat modeling agentic AI systems (rare — but if you have it, you're the cherry on top)
- Agentic Platform Exposure: AWS Agent Core, MCP, or similar agent-platform exposure
- Growth Stage AI Experience: Experience at a growth-stage company (~50–500 people) that has already adopted agentic AI
- Fintech to Agentic Path: Background in fintech transitioning into agentic systems (a common path into this kind of work today)
- AI Monitoring Tool Ownership: Past ownership of an AI monitoring tool rollout or evaluation
This role supports federal-facing systems and contributes to enterprise security functions. Candidates must meet eligibility for a government background check and follow strict data protection, access control, and incident response protocols. Familiarity with regulatory frameworks is expected. Ongoing compliance training and evidence-based documentation may be required.
At Artera, we believe the best work happens when people are truly connected. Our AI services model has shown what’s possible when small, focused teams move fast together — the speed of collaboration, pace of career growth, and quality of what we build can become stronger when teams share space. As we grow, we want every new teammate to feel part of an in-person community from day one.
That’s why we are focusing our U.S. hiring in three cities, where we are investing in offices and building strong local teams:
- Santa Barbara, CA (Our HQ)
- Seattle, WA
- Kansas City, KS/MO
Unless a role’s posting states otherwise, new U.S. roles are based in one of these three cities, and candidates should reside in (or be willing to relocate to) one of these areas. Each location follows an in-person schedule that reflects how our local teams work best; we’ll walk you through what to expect for your specific role and city during the interview process.
Focusing on offices and hiring in a few locations, rather than spreading thin across many cities, lets us invest deeply in each one so every team has real community, mentorship, and momentum in person.
Company benefits - Full health benefits (medical, dental, and vision), flexible spending accounts, company paid life insurance, company paid short-term & long-term disability, company equity, voluntary benefits, 401(k) and more!
Career development - Manager development resources, employee development funds
Generous time off - Company holidays, Winter & Summer break, and flexible time off
Employee Resource Groups (ERGs) - We believe that everyone should belong at their workplace. Our ERGs are available for identifying employees or allies to join.
Artera is an Equal Opportunity Employer and is committed to fair and equitable hiring practices. All hiring decisions at Artera are based on strategic business needs, job requirements, and individual qualifications. All candidates are considered without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetics, protected veteran status, or any other protected status.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
Artera is committed to providing employees with a work environment free of discrimination and harassment; Artera will not tolerate discrimination or harassment of any kind. Artera provides reasonable accommodations for applicants and employees in compliance with state and federal laws. If you need an accommodation, please reach out to [email protected].
Artera values your privacy. By submitting your application, you consent to the processing of your personal information provided in conjunction with your application. For more information please refer to our Privacy Policy.
All employees are responsible for protecting the confidentiality, integrity, and availability of the organization’s systems and data, including safeguarding Artera’s sensitive information such as, Personal identifiable Information (PII) and Protected Health Information (PHI). Those with specific security or privacy responsibilities must ensure compliance with organizational policies, regulatory requirements, and applicable standards and frameworks by implementing safeguards, monitoring for threats, reporting incidents, and addressing data handling risks or breaches.
Artera Seattle, Washington, USA Office
Artera Seattle, WA Office
Artera has recently opened our first office in Seattle! This is the perfect centralized location for anyone in the Seattle metro area to get to with access to bus lines, ferries and trains (and free on-site bike parking). The team is currently working 2-3 days per week in the office.
Similar Jobs at Artera
Healthtech • Sales • Software • Analytics • Conversational AI
The Senior Technical Recruiter will manage full-cycle technical recruiting, focusing on AI and engineering roles, and oversee Seattle office operations and employee engagement.
Top Skills:
AILever
Healthtech • Sales • Software • Analytics • Conversational AI
The Talent Development & Enablement Director will design career frameworks, manage performance cycles, build learning programs, and enable AI upskilling across the organization, working cross-functionally with leaders to adapt roles and skills in alignment with AI advancements.
Top Skills:
Ai ToolsHris (Rippling)Performance Management Software
Healthtech • Sales • Software • Analytics • Conversational AI
Lead technical pre-sales for Artera by architecting agentic AI workflows, conducting deep technical discovery, authoring RFP/RFI responses, demoing solutions, and ensuring technical continuity through deployment for healthcare customers.
Top Skills:
Agentic AiAPIsClaudeClaude CliLlmsModel Context Protocol (Mcp)Prompt EngineeringRetrieval-Augmented Generation (Rag)Webhooks
What you need to know about the Seattle Tech Scene
Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.
Key Facts About Seattle Tech
- Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Amazon, Microsoft, Meta, Google
- Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Madrona, Fuse, Tola, Maveron
- Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute
