TherapyNotes.com→
Cyber Security Engineer (Application… at TherapyNotes.c… · Philadelp…
Skills
Job Description
Cyber Security Engineer (Application Security)
at TherapyNotes.com
Description
About Us
TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software! Our top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more so clinicians can focus on awesome patient care.
We're a dynamic team of pros who love to innovate and push the envelope, keeping our software cutting-edge. Join us, and let's revolutionize behavioral health software together while making a real difference!
The Position
TherapyNotes is seeking an experienced, hands-on Cyber Security Engineer to own application security across our SDLC and CI/CD pipeline. The right candidate brings deep expertise securing CI/CD pipelines, code and dependency scanning workflows, and infrastructure-as-code, and is comfortable working in a healthcare-regulated environment (HIPAA, HITRUST, HITECH). This role also contributes to broader security engineering efforts — vulnerability management, incident response, and identity and access security — as part of a small, collaborative security team.
Required Skills and Experience
- Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered.
- 5+ years in application security or security engineering.
- Demonstrated experience securing CI/CD pipelines and GitHub Actions — including SAST/DAST, code/secret/dependency-scanning triage (e.g., GitHub Advanced Security, Snyk), runner and workflow-permission security, and third-party action/supply-chain risk.
- Experience reviewing Terraform or other infrastructure-as-code for security misconfigurations.
- Working knowledge of SIEM, EDR/XDR, and DLP platforms — deployment, tuning, and alert triage.
- Understanding of Zero Trust architecture principles and how they apply to application and identity access.
- Strong understanding of healthcare regulations (HIPAA, HITECH, HITRUST) and their impact on application security.
- Experience with API security, particularly integrations with other healthcare systems; familiarity with HL7 or other healthcare data standards preferred.
- Prior experience securing cloud environments (Azure preferred, AWS a plus).
- Willingness to participate in an incident response on-call rotation.
- Industry certifications such as GWAPT, OSWE, GPEN, or a cloud security certification (Azure/AWS) are ideal; CISSP or HCISPP a plus but not a substitute for hands-on tooling experience.
Application Security Responsibilities
- Collaborate with developmental teams to ensure security is continuously integrated into the Software Development Lifecycle (SDLC) and CI/CD pipeline.
- Enforce secure coding standards and best practices to minimize vulnerabilities and to protect the confidentiality, integrity, and availability of our customer's data.
- Perform in-depth security assessments, code reviews, and threat modeling on applications to identify potential vulnerabilities and risks.
- Own and operate GitHub Advanced Security — triage code, secret, and dependency-scanning findings, identify recurring vulnerability patterns and recommend broader fixes, and continuously improve scanning coverage, configuration, and workflows.
- Secure CI/CD pipelines and GitHub Actions — identities, runners, permissions, and secrets — and reduce software supply chain risk through third-party action review, dependency controls, action pinning, and artifact provenance.
- Review Terraform and other infrastructure-as-code for security issues, partnering with IT platform teams on IaC scanning and secure deployment practices.
- Ensure application security measures align with healthcare regulations and standards (e.g., HIPAA, HITRUST, and HITECH) and support regular audits.
- Collaborate with developers to remediate vulnerabilities, providing actionable guidance and ensuring effective patching or mitigation measures.
- Develop, deploy, and manage security tools and technologies (e.g., SAST, DAST, vulnerability management systems) to automate security testing and scanning processes.
- Support application security incident response activities, identifying the root cause of security incidents and contributing to resolution strategies.
- Contribute to security awareness programs for the development teams, focusing on secure coding practices and proactive security measures.
Additional Skills
- Passion for continuous learning and professional development, with a commitment to staying updated and trained on the latest trends and technologies.
- Eagerness to engage in new challenges and adapt quickly.
- Strong work ethic and drive to take ownership of projects and see them through to completion.
- Strong collaboration skills, able to work effectively with cross functional teams.
Benefits
- Competitive salary - $110,000-$150,000
- Employer sponsored health, dental, vision, life, and disability insurance
- Retirement plan with company contribution
- Annual company profit sharing
- Personal development/training budget
- Open, collaborative work environment
- Extensive 2-week onboarding plan
- Comprehensive mentorship program
Equal Opportunity Employer Statement & Applicant Rights
TherapyNotes LLC is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, national origin, age, disability, genetic information, or any other protected status under federal, state, or local law. We are committed to providing a workplace free of discrimination and harassment.For more information about your rights under federal employment laws, please review the following:
- Know Your Rights: Workplace Discrimination is Illegal
- Family and Medical Leave Act (FMLA): Employee Rights Under FMLA
If you require a reasonable accommodation during the application process, please contact humanresources@therapynotes.com.
10/6/2026
The Birth of TherapyNotes®: A Vision for Better Mental Health Practice Management
TherapyNotes emerged from the combined expertise of two visionaries: Brad Pliner, a tech innovator, and Dr. Debra Pliner, a clinical psychologist.
In 1998, Brad founded Pliner Solutions, Inc., an IT consulting firm specializing in interactive websites for the healthcare sector. Concurrently, Dr. Debra Pliner built a thriving group mental health practice, Pliner Psychological Associates, LLC, after earning her Ph.D. from the California School of Professional Psychology at Alliant International University.
Recognizing a critical need in mental health for efficient, secure electronic management of therapy notes, Brad and Debra combined their unique skills. They developed an innovative system, refining it within Debra's practice to ensure its practicality and effectiveness.
This collaboration led to the creation of TherapyNotes, launched in November 2010. Built from the ground up, it offered a powerful, user-friendly solution for managing mental health practices. The platform quickly gained acclaim for its robust, secure, and streamlined approach to practice management.
Today, TherapyNotes stands as the leading behavioral health practice management software, empowering thousands of providers nationwide to focus on what truly matters – their clients. Our journey from a small family collaboration to an industry leader demonstrates our commitment to innovation and our deep understanding of the mental health field's needs.
Join the TherapyNotes® Team
Join our tight-knit team dedicated to empowering the true heroes of mental health—the therapists, counselors, psychologists, and other professionals who make a profound difference in their clients’ lives. We take immense pride in our mission, and we’re on the lookout for passionate, talented individuals to join us on this journey of growth and innovation.
Culture & Perks at TherapyNotes®
Inspiring Collaboration: Work alongside passionate professionals who are committed to making a difference in mental health.
Supportive Environment: Join a team that lifts each other up, celebrates successes, and learns together.
Recognition and Celebrations: Celebrate milestones, achievements, and holidays with fun events, shout-outs, and personalized recognition.
Social Channels and Communities: Stay connected with the team through informal chats, interest-based groups, and shared hobbies.
Unlimited Growth: We offer endless opportunities for personal and professional development.
Diversity at TherapyNotes®
TherapyNotes is a mid-sized business, but we have always enjoyed diversity in our team. We believe in equality of opportunities regardless of race, religion, gender, disability, or sexual orientation. Employees are encouraged to be open and sensitive to the unique needs of others and discrimination is strictly forbidden. At TherapyNotes.com we believe that diversity fosters creativity which is important when implementing state-of-the-art solutions for our customers.