Application Engineer

Parachute Health

Application Engineer in IT & Security team at Parachute Health. Building secure platforms, automations, and AI workflows for healthcare technology operations.

Posted 6/24/2026full-timeRemote • New York • 🇺🇸 United StatesJuniorMid-Level💰 $80,000 - $120,000 per yearWebsite

Tech Stack

Tools & technologies

Amazon RedshiftAWSBigQueryEC2Google Cloud PlatformGraphQLJavaScriptNode.jsPythonReactRubyRuby on RailsSplunkTypeScript

About the role

Key responsibilities & impact

Internal tooling & automation: Design, develop, and maintain internal applications and automations that eliminate manual IT/Security work, including provisioning, access reviews, compliance evidence collection, audit preparation, and ticket triage.
Internal tooling & automation: Develop and maintain integrations across the security and IT stack, including Okta, Zscaler, Splunk/Wazuh, Lacework, Drata, Datadog, AWS, GCP, GitHub, and n8n.
Internal tooling & automation: Package, deploy, and operate IT/Security tooling using Parachute's standard deployment patterns and observability stack.
AI & agentic workflows: Architect agentic AI workflows for IT and Security operations, including automated alert triage, log correlation, root-cause analysis, guided remediation, access-review automation, and audit evidence collection.
AI & agentic workflows: Build the context layer (MCP servers, retrieval pipelines, and embeddings) that grounds AI agents in Parachute-specific systems, policies, and runbooks.
AI & agentic workflows: Drive AI adoption across the IT/Security team through pairing, architecture reviews, and reusable skills/plugins/workflows.
AI & agentic workflows: Build an MCP-based agent that automates audit evidence collection from multiple sources.
AI & agentic workflows: Replace manual access-review workflows with an agentic pipeline.
Security: Develop, tune, and maintain SOAR/SIEM detections, dashboards, and correlation rules in Splunk/Wazuh.
Security: Support threat hunting, incident investigation, pen test, and/or red teaming, and forensic analysis with custom tooling and queries (Redshift, BigQuery, log platforms).
Security: Apply MITRE ATT&CK, NIST CSF, and HITRUST CSF to guide detection engineering and control implementation.
Security: Contribute to SOC runbooks, SOPs, and automation playbooks (SOAR).
Security audits & reliability: Automate compliance evidence collection and control validation across SOC 2, HITRUST CSF, HITRUST AI, and HIPAA.
Security audits & reliability: Participate in an on-call rotation for IT/Security incidents; contribute to post-incident reviews and continuous improvement.
Security audits & reliability: Maintain stable, performant, and auditable internal application stacks.

Requirements

What you’ll need

2+ years of writing production code in a web-based environment.
Professional experience with Ruby on Rails, and/or Python, and/or JavaScript/TypeScript (React, Node.js).
Hands-on experience with AWS (IAM, EC2, ECS/EKS, S3, RDS, Lambda) and infrastructure-as-code.
Demonstrated experience integrating with REST/GraphQL APIs and building automations across SaaS platforms.
Working knowledge of at least one compliance framework - SOC 2, HITRUST, HIPAA, ISO 27001, or NIST.
Security-first mindset: you think about least privilege, secrets handling, PHI exposure, and audit trails by default.
Strong fundamentals in data structures, design patterns, and TDD.
Must reside in the U.S.

Benefits

Comp & perks

Medical, Dental, and Vision Coverage: Comprehensive plans with options for low-to-no-cost premiums.
Employer HSA Contribution: Company-funded contributions to your Health Savings Account.
401(k) Retirement Plan
Equity Incentive Plan
Annual Company-Wide Bonus: Opportunity for up to 15% bonus based on company performance.
Remote-First Culture: We are remote-first with a dedicated NYC office and reimbursement options for co-working spaces.
Flexible Vacation Policy
Summer Fridays: 5 additional Fridays off during the summer (separate from PTO).
Home Office and Wellness Stipend
Monthly Internet Stipend
Annual Learning and Development Stipend

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Ruby on RailsPythonJavaScriptTypeScriptReactNode.jsAWSREST APIsGraphQL APIsinfrastructure-as-code

Soft Skills

security-first mindsetstrong fundamentals in data structuresdesign patternstest-driven development (TDD)

Certifications

SOC 2HITRUSTHIPAAISO 27001NIST