Application Security Engineer
Core
Implement and manage application security programs, integrating SAST/DAST/SCA tools into CI/CD pipelines, conducting vulnerability assessments, and securing web/API applications for a clinical genetic testing company.
Role type
Application Security Engineer (DevSecOps)
Builds
Secure CI/CD pipelines, vulnerability remediation workflows, and secure SDLC processes
Domain
Healthcare / Application Security
Required skills
SAST, DAST, SCA, IAST, SonarQube, CI/CD integration, OWASP Top 10, secure coding (Java, C#, Python, JavaScript), penetration testing, vulnerability management, HIPAA, NIST, GDPR
Preferred skills
OSCP, CSSLP, GWAPT, CISSP, cloud-native security, container security, OAuth, SAML, OpenID Connect
Technologies
SonarQube, SAST, DAST, SCA, IAST, CI/CD, Java, C#, .NET, Python, JavaScript, OWASP, OAuth, SAML, OpenID Connect
Responsibilities
Integrate static and dynamic code analysis tools into CI/CD pipelines; conduct penetration tests and lead remediation of security findings; develop programs to resolve security findings; embed Security by Design and Privacy by Design principles; provide secure architecture reviews and threat modeling; prepare security reports for technical and executive audiences; collaborate with auditors and compliance teams
Seniority
Mid-level, hands-on IC
