Application Security Engineer II
Core
Protect and defend information security posture and assets from cyber threats while maintaining regulatory compliance.
Role type
Application Security Engineer
Builds
Application security stack products and security solutions
Domain
Healthcare / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Software development with security focus, Security systems administration, Programming/scripting for automation, Web application vulnerability analysis (OWASP), Network and software architecture understanding, Proxy tools (Burp Suite, ZAP), End-to-end application testing (API, GraphQL, Linux, Azure), Static code analysis tools, WAF technology setup
Preferred skills
DevSecOps activities, Incident response, Penetration testing, Red teaming, Runtime protection implementation
Technologies
Burp Suite, ZAP, Azure, Linux, Windows, GraphQL, API, WAF, Static code analysis tools
Responsibilities
Deploy and serve as product owner for application security products, Administer security-related systems (WAF, vulnerability management), Coordinate security issue remediation with scrum teams, Participate in incident response and penetration testing, Research and communicate security threat trends
Seniority
Mid-Senior, hands-on IC
