Senior Application Security Engineer
E
EnsembleHealthcare Revenue Cycle
United States, multiple time zonesFull-TimeSenior
Salary101,000 - 152,400 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonAgileJavascript.NETDevOps
Requirements
- Deep expertise in application security tooling including SAST, DAST, SCA, IaC scanning, and secret scanning.
- Strong understanding of secure coding principles and SDLC integration.
- Proficiency in scripting and programming languages such as .NET, Python, or JavaScript.
- Experience working in Agile/DevOps environments with cross-functional teams.
- Analytical skills to validate security findings, prioritize risk, and guide remediation.
- Strong attention to detail in identifying false positives and systemic security gaps.
- Excellent communication skills for presenting findings to both technical and non-technical stakeholders.
- Ability to mentor junior engineers and lead small-scale security initiatives.
- Commitment to continuous learning and staying current with evolving security threats and practices.
Responsibilities
- Manage and optimize application security tools (SAST, DAST, SCA, IaC, secret scanning) and ensure effective integration into CI/CD pipelines and the SDLC lifecycle.
- Analyze source code and infrastructure-as-code for security vulnerabilities and provide actionable remediation guidance.
- Validate and triage findings from security tools, removing false positives and ensuring accurate issue tracking.
- Create and manage remediation tickets, ensuring vulnerabilities are prioritized, assigned, and tracked to resolution.
- Collaborate with development and engineering teams to validate remediation efforts and confirm closure of security issues.
- Lead secure code reviews and contribute to threat modeling and design discussions for high-risk applications.
- Mentor junior engineers and provide technical guidance on secure development practices.
- Develop and maintain dashboards and reports that communicate application security posture, remediation progress, and risk trends to leadership.
View Full Description & ApplyYou'll be redirected to the employer's site
