Applications Security Engineer II

Centene Corporation•Remote-TX, TX

3d•$75,300 - $135,400

About The Position

The Applications Security Engineer II applies cybersecurity and privacy principles to help ensure that the organization’s applications and services meet internal security standards. The role identifies vulnerabilities, including through vulnerability and compliance scanning, and performs or oversees threat modeling, security code reviews, security assessments, security hardening reviews, and security design evaluations throughout the Secure Software Development Life Cycle (SSDLC). It also develops cloud automation routines to streamline operations and promotes understanding of the SSDLC Policy and Standards and application security testing tools (SAST, DAST, IAST, and MAST). The engineer maintains application security standards aligned with industry best practices, assesses application security architecture and configurations, monitors and remediates security alerts and vulnerabilities, and documents findings through closure with relevant parties. The role implements security capabilities such as authentication, authorization, encryption, logging, and application security testing across the SSDLC, while automating routine operational tasks and recommending improvements to security configurations. Centene describes its work as supporting access to healthcare and improving the lives of individuals, families, and communities. The position requires authorization to work in the United States without current or future employment-based visa sponsorship. Sponsorship is unavailable for the visa types listed in the posting, including H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, and CPT.

Requirements

Bachelor’s degree in a quantitative or business field, such as statistics, mathematics, engineering, or computer science, and 2–4 years of related experience; or equivalent experience demonstrated through applicable knowledge, duties, scope, and skills.
Experience administering, configuring, and implementing SaaS systems or software in the healthcare domain.
Knowledge of the .NET Framework, C++, Java, and Python.
Knowledge of software development tools and processes for designing, developing, testing, deploying, maintaining, and improving software.
Experience with static and dynamic application scanning tools.
Ability to work independently at an intermediate level.
Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions at an intermediate level.
Willingness to acquire knowledge in the area of specialty at an intermediate level.
Must be authorized to work in the United States without the need for current or future employment-based visa sponsorship.

Nice To Haves

Security+, CISSP, CISM, CIAM, or AWS/Azure Security Specialist certification.

Responsibilities

Ensure implementation and maintenance of application security standards in accordance with industry best practices.
Analyze the current application security architecture to identify critical deficiencies and recommend improvements.
Assist with audits of application security and operational configurations.
Proactively monitor and remediate application security alerts and vulnerabilities, including malware, injection attacks, and unauthorized access.
Create application security documentation and design standard operating procedures; report findings and track them to closure with relevant parties.
Automate routine application security operations and design self-service options aligned with security standards.
Implement authentication, authorization, encryption, logging, and application security testing throughout the SSDLC.
Review application security configurations and generate recommendations through initiatives and policies.
Perform threat modeling, security code reviews, security assessments, security hardening reviews, security design evaluations, and vulnerability and compliance scanning throughout the SSDLC.
Develop cloud automation routines to streamline operations.
Promote understanding and adherence to SSDLC policies, standards, and application security testing tools.
Perform other duties as assigned and comply with all policies and standards.