Senior Security Engineer II

About this job

Blink Health is a growing healthcare technology company that builds products like BlinkRx and Quick Save to make prescriptions more accessible and affordable. As a Senior Security Engineer II, you will lead the evolution of application security across the organization. You will define security strategies, influence engineering architecture, and build scalable security capabilities that help developers ship secure software rapidly. A normal day in this role involves partnering closely with engineering, platform, AI, and product teams to embed security into every stage of the software development lifecycle. You will conduct architecture reviews, design secure patterns for traditional web and mobile applications, and lead security initiatives for AI-powered applications, including LLM integrations and AI agents. Additionally, you will automate security in CI/CD pipelines, perform threat modeling, mentor team members, and establish secure engineering standards across multiple engineering teams in India.

Responsibilities

• Define and drive application security strategy across web, API, mobile, and cloud-native applications.
• Lead security architecture reviews for high-impact products and critical engineering initiatives.
• Mature and automate SAST, DAST, SCA, IaC scanning, secrets detection, and container security in CI/CD pipelines.
• Lead security reviews and develop secure design patterns for AI-powered applications, LLM integrations, and RAG systems.
• Develop organization-wide API security standards covering authentication, authorization, and runtime protections.
• Lead threat modeling exercises and perform targeted penetration testing of high-risk applications.
• Act as a trusted security advisor and mentor application security engineers and security champions.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 8 to 12+ years of experience in Application Security, Product Security, or Security Engineering.
• Demonstrated experience securing large-scale cloud-native applications.
• Strong understanding of secure software architecture, OWASP Top 10, API Security Top 10, and Mobile Top 10.
• Hands-on programming experience in Python, Java, JavaScript, Go, or C#.
• Experience building or automating security tooling using scripting or APIs.
• Experience performing threat modeling and architecture reviews with strong communication skills.

Who should apply

This role suits experienced security professionals with a strong background in application security, product security, or security engineering within cloud-native environments. Candidates should have a deep understanding of secure software development, vulnerability management, and API security. It is ideal for strategic thinkers who are passionate about automation, can balance risk reduction with engineering velocity, and possess a strong curiosity for emerging technologies like AI. Freshers cannot apply as 8 to 12+ years of experience is required.

Frequently asked questions