Senior Application Security Engineer
Core
Building and maturing an Application Security program for healthcare applications, embedding security throughout the software development lifecycle across cloud, enterprise, research, and clinical systems.
Role type
Senior IC application security engineer
Builds
Secure software development lifecycle (SSDLC) standards, secure code reviews, vulnerability assessments, penetration testing, and secure CI/CD pipelines
Domain
Healthcare technology, cloud security (Microsoft Azure), and regulated environments
Required skills
Secure code review, application vulnerability assessment, penetration testing, threat modeling, secure architecture reviews, CI/CD integration, SAST/DAST/SCA tooling, cloud security (Azure), API security, risk assessment
Preferred skills
Healthcare domain experience, HIPAA/HITRUST/NIST CSF framework knowledge, threat modeling, secure software supply-chain practices, AI/ML and biomedical system security, QA/test automation
Technologies
Burp Suite, OWASP ZAP, Metasploit, Checkmarx, Veracode, SonarQube, Microsoft Azure, Azure DevOps, GitHub
Responsibilities
Develop and mature SSDLC standards and application security practices; Perform manual and automated secure code reviews; Conduct web application and API security assessments and penetration testing; Integrate security testing into CI/CD pipelines; Partner with developers to remediate vulnerabilities; Assess application security within Microsoft Azure; Conduct threat modeling and security architecture reviews; Support security assessments for AI/ML and biomedical systems; Maintain security documentation and risk-based vulnerability tracking
Seniority
Senior, hands-on IC
