Senior Application Security Engineer
About The Position
Superlanet is seeking a Senior Application Security Engineer for a healthcare client in Texas. This is a hybrid, direct-hire role requiring approximately 50% onsite presence. The engineer will help build and mature the organization’s Application Security program by embedding security throughout the software development lifecycle across cloud, enterprise, research, and clinical applications. The role focuses on secure code reviews, application vulnerability assessments, penetration testing, and security testing in partnership with development teams. The engineer will also establish secure development standards and strengthen application security processes as the organization expands its technology environment and prepares for future hospital operations. The position involves application security work across Microsoft Azure, APIs, CI/CD pipelines, and emerging technology environments, including AI/ML applications, generative AI, automation, biomedical systems, and connected medical technologies. The engineer will maintain security documentation and risk-based vulnerability tracking, and communicate technical findings and business risks to both technical teams and leadership.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Approximately 5+ years of directly relevant, hands-on application security experience, focused on application security, secure code review, or penetration testing.
- Hands-on experience with Burp Suite, OWASP ZAP, and Metasploit.
- Strong understanding of OWASP Top 10, CWE Top 25, secure coding principles, and common web application vulnerabilities.
- Experience performing manual and automated secure code reviews.
- Experience with web application and API penetration testing, vulnerability validation, and remediation.
- Experience establishing or improving SSDLC practices.
- Working knowledge of SAST, DAST, and SCA technologies such as Checkmarx, Veracode, SonarQube, or similar platforms.
- Experience integrating security testing into CI/CD pipelines.
- Cloud application security experience, particularly within Microsoft Azure.
- Strong technical troubleshooting, documentation, risk assessment, and cross-functional communication skills.
Nice To Haves
- Experience within healthcare, an academic medical center, higher education, or another highly regulated environment.
- Familiarity with HIPAA, HITRUST, NIST CSF 2.0, and related security frameworks.
- Experience with Azure DevOps, GitHub, Adobe Experience Cloud, or comparable enterprise development platforms.
- Experience with threat modeling, security architecture reviews, and secure software supply-chain practices.
- Familiarity with AI/ML security, generative AI security, biomedical systems, connected medical devices, robotics, or automation security.
- Experience with QA/test automation and incorporating security assessments into automated testing processes.
- Preferred certifications include OSCP, GWAPT, CSSLP, CEH, and Microsoft Azure Security Engineer Associate (AZ-500).
Responsibilities
- Develop, implement, and mature Secure Software Development Lifecycle (SSDLC) standards and application security practices.
- Perform manual and automated secure code reviews, identifying vulnerabilities including OWASP Top 10 and CWE Top 25 risks.
- Conduct web application and API security assessments, vulnerability scanning, and penetration testing.
- Use Burp Suite, OWASP ZAP, and Metasploit for application testing, vulnerability validation, and controlled exploitation.
- Integrate SAST, DAST, and Software Composition Analysis (SCA) capabilities into CI/CD pipelines.
- Partner with developers to remediate vulnerabilities and provide secure coding guidance.
- Assess application security within Microsoft Azure, including identity and access management, network segmentation, and resource-level controls.
- Evaluate API security, including authentication, authorization, and data-validation controls.
- Conduct threat modeling and security architecture reviews for new applications and integrations.
- Support security assessments involving AI/ML applications, generative AI, automation, biomedical systems, and connected medical technologies.
- Maintain application security documentation, standards, procedures, and risk-based vulnerability tracking.
- Communicate technical vulnerabilities and business risk effectively to technical teams and leadership.
Benefits
- Salary based on experience and qualifications: $125,000–$150,000+.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
