All openings

Application Security Engineer

Chicago, IL, San Francisco, CA, Washington, D.C.

Rally Health is all about putting health in the hands of the individual. It’s our mission, and it drives everything we do, which is to empower people with easy-to-use online and mobile tools that help them take charge of their health and health care, from improving their diet and fitness to selecting health benefits, and choosing the right doctor at the right price for their needs.

Our culture is built on a deep and sincere commitment to helping people live healthier lives. To do this, we are committed to innovating at every level. As our president and COO David Ko says, “We are a company that continuously innovates. It cannot end. It has to be in everything we do, which means that some of the things we’re going to do are not going to work – and that’s okay. We’re not trying to build something that is churn and burn. We’re building something that follows consumers over their lifetime.”

We’re seeking a security-focused backend developer to join our growing Application Security team. Our team develops and maintains multiple core security libraries and frameworks, and is seeking someone to embed with various teams across the company to assist with integrating with these core systems. You will also be an advocate for security across our engineering team.

One of the key elements we’re looking for is a knack for dealing with multiple sprint teams and codebases. You will also need to be able to ramp up quickly in various development patterns and processes. This role will have a high level of autonomy, and a large impact on our rapidly growing security organization.

The job:

  • You are often embedded with teams to spearhead integration efforts
  • You will be crafting and writing internal tooling
  • You'll be one of the core maintainers of our internal encryption and secret management libraries
  • You will always grow the understanding of and champion secure coding practices across disciplines

Your experience:

  • 2+ years of engineering experience using a compiled language
  • You have familiarity with a microservice architecture and security issues it presents
  • You should have a deep understanding of computer science fundamentals, especially around security
  • Familiarity with the OWASP top 10
  • Expert-level communications skills with technical as well as non-technical staff
  • You've written major software projects in Scala or another functional programming language

Bonus points:

  • Do you have experience with software security in a non-academic setting?
  • Are you excellent with AWS (configuring, deploying, managing, monitoring) or another cloud computing platform?
  • Are you familiar with HIPAA and how it applies to information security?
  • Are you tied in to your local application security community?

Why join Rally? On top of an innovative work atmosphere and a chance to help people change their lives, we offer competitive pay, daily catered lunches, and an extensive benefits package for all full-time employees (including medical, dental, vision and 401(k)). In addition, offer the ability to grow, while truly making an impact in the healthcare system.

Rally Health is committed to ensuring that its workforce reflects America’s diverse population. Rally Health knows that such diversity will enrich us with the talent, energy, perspective and inspiration it needs to achieve its mission. Rally Health believes in a policy of equal employment and opportunity for all people based on merit and commitment to the principles of diversity. It is our policy to recruit, hire, train, and promote individuals in all job titles, and administer all programs, without regard to race, color, religion, national origin or ancestry, citizenship, sex, age, marital status, pregnancy, childbirth or related medical conditions, personal appearance, sexual orientation, gender identity or expression, family responsibilities, genetic information, disability, matriculation, political affiliation, veteran status, union affiliation, or any other category protected by applicable federal, state or local laws.

Individuals with disabilities and veterans are encouraged to apply. Applicants who require an accommodation related to the application and/or review process should notify Talent Acquisition (

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.