---
title: 'Application Security Engineer at Candid Health'
canonical: 'https://feeny.ai/job/application-security-engineer-candid-health-san-francisco-ca-denver-co-new-york-cdpsmhdw63ca'
type: 'job'
last_seen: '2026-10-13'
---

# Application Security Engineer at Candid Health

- **Company:** Candid Health
- **Location:** San Francisco CA Denver CO New York, NY
- **Employment:** full-time
- **Posted:** 2026-05-18
- **Last confirmed live:** 2026-10-13
- **Apply:** https://jobs.ashbyhq.com/candidhealth/f111d46b-4efb-4b41-9cc2-a6bd49b71cfa

## Job description

## About Candid Health

In simple terms, healthcare in the U.S. has a massive, invisible problem behind the scenes: getting doctors paid by insurance companies is notoriously complicated. Insurance rules are constantly changing, and every bill (or "claim") requires mountains of paperwork. When mistakes happen, bills get rejected, patients end up with unexpected charges, and healthcare providers waste billions of dollars and countless hours on administrative bureaucracy instead of focusing on patient care.

That is where Candid Health steps in. Founded by former Palantir leaders who experienced these pain points firsthand, we are building the modern financial backbone for American healthcare. Instead of relying on decades-old legacy software or attempting to patch broken systems with superficial tools, we've rebuilt the underlying infrastructure from the ground up.

Our core product is an autonomous Revenue Cycle Management (RCM) platform. Powered by AI agents and a configurable rules engine, the platform unifies clinical, billing, and insurance data into a single smart system. It acts like an intelligent, automated back-office that handles complex medical claims from start to finish—submitting them accurately on the first pass, cutting down administrative costs, and dramatically increasing cash flow for healthcare providers.

Today, we are trusted by over 200 fast-growing healthcare organizations—from digital health innovators to large enterprise medical groups—processing billions in claims annually. Backed by top investors like Sixth Street Growth, Oak HC/FT, 8VC, and Y Combinator, Candid Health recently raised a $120 million Series D to fuel the AI-driven transformation of healthcare payments and eliminate administrative friction for good.

## Role Overview

We are looking for a Product Security Engineer to join our team and act as a champion for security within our product engineering organization. You will be responsible for ensuring our products are designed, developed, and maintained with security as a core pillar. You will work in partnership with development squads to perform threat modeling, guide secure architecture decisions, and automate security gates in our CI/CD pipelines.

## Key Responsibilities

- Security by Design: Lead threat modeling sessions during the architectural design phase of new features to identify potential risk vectors early.
- Secure Development Lifecycle (SDLC): Drive the adoption of "Shift Left" security practices, integrating security tooling (SAST, DAST, SCA) directly into developer workflows.
- Vulnerability Management: Triage, prioritize, and partner with engineering teams to remediate vulnerabilities found in code, third-party libraries, and cloud infrastructure.
- Security Tooling & Automation: Build, maintain, and tune security automation tools to reduce friction for developers while maintaining high-security standards.
- Secure Coding Standards: Develop and deliver training, coding patterns, and security guardrails to help engineering teams build resilient, secure-by-default products.
- Incident Response Support: Assist in identifying the root cause of security incidents related to product features and contribute to post-incident remediation and architectural improvements.
- Supply Chain Security: Build out processes and automation to ensure the security of open-source dependencies.

Required Qualifications

- Experience: 5+ years of experience in software engineering or security engineering, specifically focusing on product security or application security.
- Technical Skills:
- Proficiency in one or more programming languages (e.g., Python, Go, Java, or JavaScript).
- Deep understanding of modern web/cloud architecture (e.g., APIs, Microservices, Kubernetes, AWS/GCP/Azure).
- Familiarity with the OWASP Top 10 and common exploitation techniques.
- Collaboration: Proven ability to influence and collaborate with engineering teams without hindering development velocity.
- Problem Solving: Strong analytical skills to evaluate complex systems and design innovative, practical security solutions.

## Preferred Skills (Nice to Have)

- Experience with Infrastructure as Code (IaC) security (e.g., Terraform, CloudFormation).
- Experience in designing cryptographic implementations or secure authentication/authorization flows (e.g., OAuth, OIDC, JWT).
- Knowledge of compliance frameworks relevant to our industry (e.g., SOC2, ISO27001, HIPAA).

Pay Transparency The estimated starting annual salary range for this position is $180,000 - 258,000 USD. The listed range is a guideline from [Pave](https://www.pave.com/) data, and the actual base salary may be modified based on factors including job-related skills, experience/qualifications, interview performance, market data, etc. Total compensation for this position may also include equity, sales incentives (for sales roles), and employee benefits. Given Candid Health’s funding and size, we heavily value the potential upside from equity in our compensation package. Further note that Candid Health has minimal hierarchy and titles, but has broad ranges of experience represented within roles.

## About Candid Health

## Company Overview
- **One-liner**: Candid Health provides an AI-powered revenue cycle automation platform that simplifies health insurance claims processing for healthcare providers.
- **Entity Type**: Private (venture-backed, Y Combinator S19)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2019
- **Founders**: Not publicly available in provided sources

## Core Business
- Primary industry: Healthcare revenue cycle management (RCM) software
- Target customers: B2B – healthcare providers (digital health companies, hospitals, clinics)
- Mission or purpose: “Remake your health insurance claims process with Candid Health – a transformative RCM automation platform, custom built for providers to end unnecessary human intervention.”

## Products & Services
- **[Candid Health Platform]**: A SaaS revenue cycle automation platform that automates claim submission, denial management, and payment posting. Uses AI to detect, flag, and fix issues, aiming for a “touchless” claims process with minimal human intervention.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private company)
- **Key Metric**: Total funding of $97.65M (per Cbinsights)
- **Notable Investors/Partners**: Not explicitly listed in provided sources; the company is a Y Combinator alum (S19).
- **Growth Signals**: The company has raised significant venture funding ($97.65M total), indicating strong investor confidence. The website emphasizes high “touchless claim rate” and “payer net collection rate” – key metrics that suggest product-market traction.

## Competitive Advantages
- **End-to-end automation**: The platform covers the entire RCM workflow, from claim submission to final payment, reducing manual effort.
- **AI-driven error detection**: Claims errors are flagged and fixed automatically, increasing the “touchless claim rate.”
- **Focus on net collections**: Helps providers increase revenue while lowering cost-to-collect.

## Strategic Focus
- Expanding automation capabilities and AI models to handle more complex payer rules and reduce human intervention further.
- Targeting digital health companies and traditional healthcare providers struggling with rising claims complexity.

## Why Work Here
- **Culture**: A fast-growing healthcare technology startup with a mission to fix a notoriously broken part of the healthcare system.
- **Work environment**: Likely dynamic and engineering-led; the careers page (jobs.ashbyhq.com) lists open roles in engineering, product, and customer success.
- **Remote/hybrid policy**: Not specified in provided sources; typical for a San Francisco-based startup to offer hybrid or remote options.
- **Notable perks**: Opportunity to work on cutting-edge AI in healthcare, with a direct impact on provider revenue and patient access.

## Sources
1. [candidhealth.com](https://candidhealth.com/)
2. [cbinsights.com](https://www.cbinsights.com/company/candid-health)
3. [jobs.ashbyhq.com](https://jobs.ashbyhq.com/candidhealth)

## Other roles at Candid Health

- [AI/ML Engineer](https://feeny.ai/job/ai-ml-engineer-candid-health-san-francisco-whnvarmjjt3f) — San Francisco, CA
- [Customer Strategy & Operations](https://feeny.ai/job/customer-strategy-operations-candid-health-san-francisco-ca-denver-co-new-york-tts60gvcdccs) — San Francisco CA Denver CO New York, NY
- [Business Development Representative](https://feeny.ai/job/business-development-representative-candid-health-new-york-7m9eb5r8vzjh) — New York, NY
- [Customer Support](https://feeny.ai/job/customer-support-candid-health-san-francisco-ca-denver-co-new-york-r3hpx5c6zsgz) — San Francisco CA Denver CO New York, NY
- [Technical Program Manager - Implementation](https://feeny.ai/job/technical-program-manager-implementation-candid-health-san-francisco-ca-denver-s72fyqqfkqny) — San Francisco CA Denver CO New York, NY
- [TechOps Engineer](https://feeny.ai/job/techops-engineer-candid-health-san-francisco-33vpbadh2shd) — San Francisco, CA
- [Account Executive (Accelerated Path)](https://feeny.ai/job/account-executive-accelerated-path-candid-health-united-states-j68q0ms7y228) — United States
- [Technical Sourcer](https://feeny.ai/job/technical-sourcer-candid-health-san-francisco-ca-denver-co-new-york-f2x6cyqsy5fc) — San Francisco CA Denver CO New York, NY
- [Technical Recruiter](https://feeny.ai/job/technical-recruiter-candid-health-san-francisco-ca-denver-co-new-york-e7yvxjpe30rg) — San Francisco CA Denver CO New York, NY
- [Security GRC Lead](https://feeny.ai/job/security-grc-lead-candid-health-san-francisco-afj721xp3qgg) — San Francisco, CA