---
title: 'Senior Application Security Engineer at Commure'
canonical: 'https://feeny.ai/job/senior-application-security-engineer-commure-mountain-view-e0h4d8c4g923'
type: 'job'
last_seen: '2026-09-19'
---

# Senior Application Security Engineer at Commure

- **Company:** [Commure](https://feeny.ai/companies/commure)
- **Location:** Mountain View, CA
- **Compensation:** $160k–$190k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-07-27
- **Last confirmed live:** 2026-09-19
- **Apply:** https://jobs.ashbyhq.com/commure/7b285a52-77fe-4c2d-89ee-b85b87fba853/application

**Skills:** Splunk Enterprise Security, AWS OpenSearch, Python, Java, Bash, AWS SageMaker, AWS Lambda, AWS IAM, Securonix, CrowdStrike, Carbon Black, MITRE ATT&CK, NIST CSF, Zero Trust, CIS Controls, STIX/TAXII, MISP, Splunk, OpenSearch, Machine Learning

> Architect scalable detection frameworks and integrate threat intelligence into automated security pipelines. Build AI-driven security operations at scale using Python, Java, and AWS technologies while partnering with red teams and SOC engineers to improve detection standards.

## Job description

At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs.

Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for “Overall NLP Company of the Year.”

Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here.

The future of healthcare is being built right now. Come deliver this transformation.

## About the Role

Security patterns that worked 20 years ago don't hold up anymore, especially as AI changes how fast engineering teams ship code. We're looking for an Application Security Engineer who combines real engineering depth with security fundamentals — someone who gets into the code, spots systemic patterns, and builds the tooling and fixes that address them at scale, rather than flagging issues for someone else to resolve. This isn't an audit-from-a-distance role. You'll work directly with engineering, with no interim layer needed, and you'll be equally comfortable owning a project end-to-end as you are looping in support when it counts.

Full Time position requires working 3 days a week in our Mountain View office (Hybrid)

## What You'll Do

- Identify systemic security gaps in our codebase and engineering workflows, and drive durable fixes with engineering, not just one-off patches
- Build security tooling and automation, including SAST/SCA integration and custom checks, that catches issues earlier rather than after they ship
- Conduct code reviews and security design reviews for major product initiatives, including agentic AI systems and data pipelines
- Drive threat modeling for new features and translate requirements into guidance engineers actually use
- Think through what AI-accelerated development means for how we find, prioritize, and fix risk, and use AI tooling where it genuinely helps
- Present our security posture to enterprise customers, including healthcare and regulated-data conversations

## What You Have

- 5+ years of hands-on application security or software engineering experience, not mainly audit or compliance work
- Genuine engineering depth: you can read and reason about code well enough to find real bugs and root causes
- Strong AppSec fundamentals: threat modeling, secure code review, and OWASP-aligned vulnerability knowledge
- Comfort operating independently with good judgment in a fast-moving environment
- Clear communication that earns trust with engineers

## Nice to Have

- Experience securing agentic AI or LLM-powered systems
- Experience building SAST pipelines or custom static analysis rules
- Healthcare or other regulated-industry security experience (PHI, HIPAA)
- Offensive security background (bug bounty, CTF, pentesting)
- Direct enterprise customer experience

Please be aware that all official communication from us will come exclusively from email addresses ending in @[commure.com](http://commure.com). Any emails from other domains are not affiliated with our organization.

Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.

## About Commure

## Company Overview
- **One-liner**: Commure provides an AI-native enterprise Revenue Cycle Management (RCM) and ambient clinical documentation platform that powers the business and clinical workflows of large health systems.
- **Entity Type**: Private (last disclosed funding: Series E, June 2025)
- **Headquarters**: Mountain View, California, United States
- **Founded**: 2017 (based on earliest seed round)
- **Founders**: Not publicly available

## Core Business
- **Primary industry**: Healthcare technology (AI-powered RCM, ambient scribing, clinical intelligence)
- **Target customers**: Large health systems, hospitals, urgent care networks (B2B Enterprise)
- **Mission or purpose**: Simplify healthcare – reimagine the experience of care delivery by reducing administrative burden and letting clinicians focus on patients

## Products & Services
- **Ambient AI Scribing**: Automatically generates clinical documentation from patient encounters, integrating with Epic and 60+ EHRs.
- **Autonomous Coding**: AI-driven medical coding, charge capture, and clinical documentation improvement.
- **Revenue Cycle Management (RCM) Suite**: End-to-end automation including claim processing, denial management, appeal automation, reconciliation, and patient responsibility.
- **Patient Access**: AI-powered appointment scheduling, prior authorizations, patient intake, and referral management.
- **Clinical Copilots**: Real-time decision support tools that reduce cognitive load and surface actionable insights during encounters.
- **Care Navigation & Cues**: Post-visit follow-up, care coordination, and patient education tools.
- **Staff Safety**: Infrastructure for managing security and safety of healthcare staff.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private)
- **Key Metric**: Annual Revenue ~$100M (LinkedIn estimate); Total Funding $974.3M raised across 10 rounds (including Series E of $200M in June 2025 led by General Catalyst)
- **Notable Investors/Partners**: General Catalyst (lead), Sequoia, Y Combinator, Lux Capital, Human Capital, 8VC, Greenoaks Capital, Elad Gil, NVIDIA (partner)
- **Growth Signals**: Achieved 300% year-over-year growth for two consecutive years; headcount grew 94.9% YoY to ~926 employees; named to Fortune’s Future 50 list (2025); processes $25B+ in annual claims and supports 40M+ ambient appointments across 150+ health systems and 2,000+ care sites.

## Competitive Advantages
- **Deep EHR integrations**: Works with 60+ EHR systems, including Epic, making it highly embedded in existing health system workflows.
- **End-to-end platform**: Covers the entire revenue cycle from patient intake and clinical documentation through claims, coding, and denial management – reducing handoffs and data silos.
- **Proven scale**: Trusted by leading systems like Yale New Haven Health, Mount Sinai, and others, with documented outcomes (e.g., 20% revenue boost at an NYC health system).
- **AI-first architecture**: Uses a unified data model to power real-time, AI-driven operations across clinical and administrative functions.

## Strategic Focus
- Expand AI-powered offerings into additional care segments (ambulatory, urgent care, etc.)
- Continue to build out ambient AI scribing and autonomous coding capabilities
- Deepen partnerships with large health systems and move from “upstart innovator to the industry standard” over the next few years
- Grow international workforce (31% in India, 7% in Bangladesh) while maintaining US headquarters

## Why Work Here
- **Culture highlights**: “Day 1” startup mentality with high ownership, extreme customer focus, and lean staffing – minimal pure management (“no work theater”); values include “Speed Above All Else” and “High Output Matters”
- **Remote/hybrid policy**: Not explicitly stated; headquarters in Mountain View, CA with teams across the US, India, Bangladesh, Colombia, and other countries – likely hybrid/remote options for many roles
- **Notable perks**: Flexible PTO, medical/dental/vision coverage, pet insurance (dog-friendly office in Mountain View), One Medical membership, pre-tax HSA/FSA/commuter benefits
- **Engineering culture**: Building mission-critical AI for healthcare with a strong product-engineering collaboration; founders and leaders come from health tech backgrounds; recent job postings include senior software engineer, backend engineer, and frontend platform manager roles

## Sources
1. [Commure.com](https://www.commure.com/)
2. [Commure Company Page](https://www.commure.com/company)
3. [Commure Careers Page](https://www.commure.com/careers)
4. [Commure Life at Commure](https://www.commure.com/life-at-commure)
5. [Commure LinkedIn](https://www.linkedin.com/company/commure)

## Other roles at Commure

- [Sales Development Representative (Bangladesh)](https://feeny.ai/job/sales-development-representative-bangladesh-commure-dhaka-rav85bm93jcb) — Dhaka, Bangladesh
- [Facilities Intern (Bangladesh)](https://feeny.ai/job/facilities-intern-bangladesh-commure-dhaka-afv738fpwkwm) — Dhaka, Bangladesh
- [Senior Software Engineer, Agent Platform](https://feeny.ai/job/senior-software-engineer-agent-platform-commure-rio-de-janeiro-tekttp09ex2s) — Rio de Janeiro, Brazil
- [Senior Fullstack Engineer, AI Orchestration](https://feeny.ai/job/senior-fullstack-engineer-ai-orchestration-commure-mountain-view-0qpxqxa4j7m5) — Mountain View, CA
- [Senior People Business Partner](https://feeny.ai/job/senior-people-business-partner-commure-mountain-view-0r3bhfvv3nmt) — Mountain View, CA
- [Software Engineer, Early Career 2027](https://feeny.ai/job/software-engineer-early-career-2027-commure-mountain-view-shqx23pq3y6g) — Mountain View, CA
- [Senior Operations Manager, Implementation & Accounts - Hospital Billing](https://feeny.ai/job/senior-operations-manager-implementation-accounts-hospital-billing-commure-san-89gs7gpcjhgp) — San Francisco Bay Area, OR
- [Enterprise Account Executive, Mid-Atlantic](https://feeny.ai/job/enterprise-account-executive-mid-atlantic-commure-washington-9mdbc4b1sj9v) — Washington, DC
- [Software Engineering Intern, Summer 2027](https://feeny.ai/job/software-engineering-intern-summer-2027-commure-mountain-view-zy27v5cpt6z7) — Mountain View, CA
- [Enterprise Account Executive, East Coast](https://feeny.ai/job/enterprise-account-executive-east-coast-commure-new-york-jscm24q12tsz) — New York, NY