Cybersecurity Engineer III

Teladoc Health is hiring a Cybersecurity Engineer III (New York, NY, remote) to strengthen Application Security, DevSecOps, and medical device security.

Responsibilities

• Advance Application Security (AppSec) by integrating Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secrets scanning into development workflows
• Support DevSecOps by writing basic scripts to automate security checks and monitoring vulnerabilities across the SDLC
• Maintain endpoint security by monitoring EDR (Endpoint Detection and Response) alerts
• Ensure application controls and threat detection are correctly applied across the Teladoc Health medical device fleet
• Enhance Medical Device Security by assisting with risk assessments
• Support enforcement of security controls and participate in documenting compliance with safety standards

Requirements

• Bachelor’s degree (or foreign equivalent) in Computer Science, Information Technology, Electrical Engineering, Cybersecurity, Computer Engineering, or a related field
• 4+ years of experience as a Cybersecurity Engineer, Security Analyst, or in an occupation involving application security and medical device security within the Healthcare Industry
• Employment experience translating security findings into actionable engineering guidance
• Experience working across partner teams (including DevOps and application teams) to define and implement security-related solutions
• Ability to provide clear documentation for the design and implementation of security controls and processes
• Hands-on familiarity with related security platforms: AppSec, DevSecOps, and EDR
• Experience applying security controls within medical device systems

Technologies

• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• Secrets scanning tools
• EDR (Endpoint Detection and Response)
• AppSec, DevSecOps
• SDLC

Compensation

• USD 149,011 - 170,900 per year

Benefits

• Flexible Vacation Policy (all time off must be approved by your manager prior to use)
• 80 hours of Paid Sick, Safe, and Caregiver Leave annually (full-time positions only)

Position qualification: Bachelor’s degree (or foreign equivalent) plus 4 years of experience in roles involving application security and medical device security within the Healthcare Industry, including experience with security findings-to-guidance translation, cross-team implementation (DevOps and application teams), documentation of security controls and processes, AppSec/DevSecOps/EDR platforms, and applying security controls within medical device systems.