Product Security Engineer / Product Security Specialist
Remote
About Us
Zyter|TruCare is a population health platform that brings together technology, agentic AI, and clinician-led services into one cohesive ecosystem. We help payers and providers run Utilization, Case, and Disease Management on a single platform and then layer AI to orchestrate work, reduce manual effort, and deliver measurable outcomes.
Our products serve over 56M+ members and patients across 50+ clients, powering the operating systems for payer and provider operations. We combine a digital platform, AI orchestration, and clinical services into a unified equation that simplifies work, improves decisions, and scales outcomes across the care continuum.
Position Summary
We are looking for a Product Security professional to ensure that security is built into our products throughout the entire Software Development Lifecycle (SDLC). The role focuses on identifying, assessing, and mitigating security risks in applications, services, and platforms while collaborating closely with engineering, product, and DevOps teams. The ideal candidate will help design and implement secure architectures, threat models, and security controls to protect applications and customer data.
Key Responsibilities
Secure Product Development
- Integrate security best practices into the Software Development Lifecycle (SDLC).
- Work closely with development teams to ensure secure coding practices.
- Conduct security reviews of application designs and architectures.
Threat Modeling & Risk Assessment
- Perform threat modeling to identify potential vulnerabilities in product features and architectures.
- Conduct security risk assessments and recommend mitigation strategies.
- Prioritize vulnerabilities based on risk and business impact.
Application Security Testing
- Perform or support security testing activities including:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Manual security testing
- Coordinate with internal teams to remediate identified vulnerabilities.
Secure Architecture
- Provide guidance on secure system architecture and design patterns.
- Ensure products are designed with secure authentication, authorization, encryption, and data protection mechanisms.
Incident & Vulnerability Management
- Investigate and respond to product security vulnerabilities.
- Support security incident response related to applications.
- Track and manage remediation of security issues.
Security Awareness
- Train and educate engineering teams on secure coding and security best practices.
- Develop security guidelines, documentation, and standards.
Qualifications & Skills
- Bachelor’s degree in Computer Science, Cybersecurity, or related field
- 3–8+ years of experience in application security, product security, or software engineering
- Strong understanding of:
- Secure coding practices
- Application security vulnerabilities (OWASP Top 10)
- Authentication and authorization mechanisms
- Cryptography fundamentals
- Experience with security testing tools such as SAST, DAST, and SCA tools
Why join Zyter|TruCare?
- Transforming healthcare: We are redesigning workflows and adding an agentic AI layer into UM, CM, and PA so payers and providers move faster with fewer handoffs, clear accountability, and better member and provider experiences. This is system-level change, not feature tweaks.
- Outcomes over features: We measure throughput and cost to serve. Improving metrics like cycle time, first-pass decisions, denial rework, time to create care plans, and adoption.
- Market validation with room to build: We have 50+ customers across payer and provider settings with over 56M+ lives on our platform. Recognized in industry evaluations, for example, recently ranked #1 among care management platforms by Everest Group.
- Build something great, end to end: Turn operating model designs into real life solutions. Map the current processes and workflows, define the areas of potential efficiency, orchestrate agents, and launch governed workflows that scale resulting in high ownership and visible impact.
- Career-defining intersection: Work at the intersection of strategy, operations, product, and AI. Partner with executive leadership team, clinicians, and other internal teams.
Zyter|TruCare is an equal opportunity employer committed to fostering an inclusive and diverse workplace. We encourage applications from all qualified individuals.
Perks and Benefits
Our company values are a set of core beliefs held by our organization. They drive how and why we do the things we do. While our business plans and strategies may change, our core values remain unchanged.
Flexible schedule
Open Cafeteria
Team Building Camps
Paid Holidays
Competitive Salary
Servicing around the globe
Zyter|TruCare offers purpose-built technology and services