Senior Application Security Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Execute and uphold the application security program throughout research, development, quality assurance, support, and IT systems.

• Provide guidance and actively engage in the creation of secure products and architectures.

• Conduct architecture security evaluations, security-oriented code reviews, and security testing.

• Collaborate with engineering and product teams to design and deploy security-related systems and functionalities.

• Write secure code when necessary.

• Validate threat models, risks, and overall security posture.

• Oversee software usage and carry out forensics to ensure compliance with required security standards.

• Stay updated on advancements in web and client application security, offering insights on trends, emerging standards, and best practices.

• Communicate technical concepts effectively to senior management.

• Participate in meetings crucial for seamless product delivery throughout the Software Development Life Cycle.

• Utilize AI/ML tools to improve security testing, threat modeling, and code review workflows.

⛳️ Requirements

• Over 5 years of pertinent Information Security and/or Software Engineering experience.

• Knowledge of AI/LLM-specific security risks, including the OWASP Top 10 for LLM Applications, prompt injection, model poisoning, and data exfiltration.

• Experience in evaluating or securing features of AI-powered applications, AI coding assistants, or responsible AI/ML data management and privacy practices.

• Understanding of secure application programming, coding lifecycles, and design principles.

• Capability to implement code based on technical specifications.

• Strong grasp of security principles, best practices, architectures, tools, and processes.

• Proficient in multiple current operating systems and hosting environments.

• Familiarity with software and network architecture, standards, and methods for building authentication protocols.

• Ability to perform threat assessments, evaluate risks, and develop risk-based security processes across various development methodologies.

• Proficient in conveying security objectives to diverse audiences.

• Functional knowledge of reverse engineering techniques and tools.

• In-depth knowledge of data storage formats, tools, and programming languages.

• Familiarity with programming languages utilized in secure products.

• Must possess authorization to work in the United States for Henry Schein One without current or future employer sponsorship.

• Bachelor's Degree in Computer Science or Information Security.

• One or more relevant industry certifications: CISSP, CEH, PNPT, OSWE, GWAPT, OSED, and/or OSCP.

🏝️ Benefits

• Competitive compensation.

• Medical, Dental, and Vision Coverage.

• 401K Plan with Company Match.

• Paid Time Off (PTO).

• Paid Parental Leave.

• Short Term Disability.

• Work Life Assistance Program.

• Health Savings and Flexible Spending Accounts.

• Education Benefits.

• Worldwide Scholarship Program.

• Opportunities for volunteering.

• Career growth and development prospects.

• Up to 10% travel required as needed.