TherapyNotes, LLC

Full-stack Engineer

• Lead the daily activities of a diverse and distributed team of software developers and quality assurance engineers
• Partner with product managers to define key milestones and ensure delivery of software solutions that meet business expectations
• Perform full-stack development including front end, business logic, and data access layers
• Responsible for the entire development lifecycle from planning to release and support
• Actively contribute to software architecture decisions, design strategies, and code reviews to ensure high-quality, scalable, and maintainable solutions
• Mentor and assist in the training and onboarding of new developers
• Maintain high standards, attention to detail, accuracy and completeness
• Build scalable and responsive web applications and services using Angular and ASP.NET Core
• Implement robust APIs using event-based software design and SOA principles
• Collaborate with other development teams to translate business needs into customer-focused technical solutions

Lead Software Developer

Product Manager

• Translate high-level product goals and designs into clear, actionable requirements for development teams
• Act as an internal expert on feature functionality and behavior, collaborating closely with Product Managers, Designers, Developers, and QA
• Own day-to-day coordination and prioritization of the development backlog for one or more Agile teams
• Create detailed tickets, user stories, and well-defined acceptance criteria
• Coordinate with the team and management to meet product release goals in a Kanban development environment
• Participate in and help lead Agile team meetings, including grooming, design and requirements refinement, daily standups and retros
• Coordinate with QA and Developers to validate that all requirements are met before release
• Maintain clear and consistent communication with team members and stakeholders
• Coordinate with the Release team and Product Management to support release planning, documentation and customer-facing publications

Product Owner

QA Engineer

• Write automated tests for API and UI layers using tools such as Selenium
• Maintain existing tests and write manual and automated tests while features are being developed
• Deliver a comprehensive test strategy for an industry leading SaaS application
• Ensure test activities are consistent with test plans across diverse and distributed development teams
• Collaborate with Product and Development teams to create user stories, define acceptance criteria, and build test plans
• Test and validate software to ensure it satisfies requirements and is free from defects
• Analyze root cause for testing failures and open appropriate tickets with sufficient findings
• Integrate test automation into the CI/CD pipeline to increase speed to market
• Manually test application components where automation is not a good fit
• Make recommendations to improve current testing processes

Quality Assurance Engineer

Compliance

• TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software; SaaS solution handles scheduling, billing, documenting, telehealth, and more
• Develop and implement GRC strategies, policies, and procedures to ensure compliance with regulatory standards and industry best practices
• Lead the assessment and management of risks across the organization, including conducting risk assessments, identifying gaps, and developing mitigation plans
• Collaborate with cross-functional teams to integrate GRC principles into business processes and systems
• Monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks
• Provide guidance and training to employees on GRC policies, procedures, and best practices
• Support the execution of audits, assessments, and compliance activities and serve as liaison for external audits
• Mentor and coach GRC analysts
• Support execution and continual improvement of the information security program, emphasizing HIPAA-HITECH, state, and GDPR compliance
• Identify and document cyber risks, manage mitigation, and report issues to leadership
• Assist with ad-hoc compliance reporting and follow up with customers and support partners to address vulnerabilities
• Provide support to Information Security Incident Response team during cyber/privacy incidents
• Validate that information security requirements are built into architectures and new technology projects
• Ensure application and codebase protect confidentiality, integrity, and availability of customer data
• Evaluate technical security posture of proposed third-party solutions and improve third party risk management

Senior GRC Analyst

Security Engineer

About Us: TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software; top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more.
Position Description: Senior Cyber Security Engineer blending deep technical execution with strategic influence, hands-on across detection and response, vulnerability and risk management, and secure cloud architecture; mentor junior engineers and collaborate across IT, DevOps, and product teams.
Responsibilities:
Hands-on management of enterprise-wide security tools and platforms including SIEM, DLP, EDR/XDR, and vulnerability management across hybrid environments (cloud and on-prem).
Monitor security alerts, respond to incidents, and manage escalations.
Participate in Incident Response on-call rotation.
Conduct threat analysis, vulnerability assessments, and risk evaluations.
Manage and secure identities in Microsoft Entra ID through Conditional Access and Entitlement Management.
Develop and implement strategies for Data Loss Prevention and identify gaps in DLP coverage.
Stay informed about the latest cyber threats, attack methodologies, and vulnerabilities.
Conduct periodic system and network configuration reviews to ensure compliance with security standards.
Collaborate with developmental teams to ensure security is continuously integrated into the SDLC and CI/CD pipeline.
Enforce secure coding standards and best practices.
Identify and document cyber risks and manage mitigation; report issues to leadership.
Align Zero Trust principles with organizational security goals.
Participate in audits and assessments, supporting GRC efforts.

Lead Software Developer

Product Owner

Quality Assurance Engineer

Senior GRC Analyst

Senior Cloud Security Engineer