Applications Security Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Implement cybersecurity and privacy principles to ensure that applications and services comply with internal security standards.

• Identify vulnerabilities through compliance and vulnerability scanning.

• Manage and conduct threat modeling, security code reviews, security assessments, security hardening reviews, and security design evaluations throughout the Secure Software Development Lifecycle (SSDLC).

• Design and develop cloud automation processes to enhance operational efficiency.

• Encourage compliance with SSDLC policies, standards, and application security testing tools including SAST, DAST, IAST, and MAST.

• Establish and uphold application security standards based on industry best practices.

• Evaluate application security architecture to identify weaknesses and suggest enhancements.

• Support audits of application security and operational configurations.

• Track and address application security alerts and vulnerabilities such as malware, injection attacks, and unauthorized access.

• Develop application security documentation and standard operating procedures, report findings, and ensure they are resolved.

• Automate routine application security tasks and create self-service options.

• Implement authentication, authorization, encryption, logging, and application security testing throughout the SSDLC.

• Review application security configurations and provide recommendations.

• Adhere to all policies and standards while performing additional assigned tasks.

⛳️ Requirements

• Must have authorization to work in the U.S. without requiring employment-based visa sponsorship now or in the future.

• Bachelor's degree in a quantitative or business-related field such as statistics, mathematics, engineering, computer science, along with 2–4 years of relevant experience.

• Equivalent experience gained through relevant knowledge, responsibilities, scope, and skills that reflect the level of this position may be considered.

• Experience with the administration, configuration, and implementation of SaaS systems/software within the healthcare sector.

• Proficiency in .NET Framework, C++, Java, and Python.

• Familiarity with development toolsets for designing, developing, testing, deploying, maintaining, and enhancing software.

• Experience with both static and dynamic application scanning tools.

• Intermediate capability to identify basic issues and procedural inconsistencies, gather data, establish facts, and draw accurate conclusions.

• Intermediate ability to work independently.

• Security+, CISSP, CISM, CIAM, or AWS/Azure Security Specialist certifications are preferred.

🏝️ Benefits

• Competitive salary.

• Health insurance coverage.

• 401K and stock purchase options.

• Tuition reimbursement program.

• Paid time off in addition to holidays.

• Flexible work arrangements including remote, hybrid, field, or office schedules.

• Additional incentive programs may be part of the total compensation package.

• Equal opportunity employer dedicated to promoting diversity.