Build and mature the organization’s application security program across cloud, enterprise, research, and clinical applications. Conduct secure code reviews, vulnerability assessments, penetration testing, threat modeling, and security architecture reviews. Integrate SAST, DAST, and SCA into CI/CD pipelines, assess Azure and API security, guide developers on remediation, and establish SSDLC standards. Support security assessments involving AI/ML, biomedical systems, connected medical technologies, and regulated healthcare environments while communicating technical and business risks.
Superlanet is seeking a Senior Application Security Engineer for our healthcare client in Texas. This is a hybrid position requiring approximately 50% onsite presence and is a direct-hire opportunity.
The Senior Application Security Engineer will play a key role in building and maturing the organization’s Application Security program, embedding security throughout the software development lifecycle across cloud, enterprise, research, and clinical applications.
The engineer will be responsible for secure code reviews, application vulnerability assessments, penetration testing, and security testing while partnering directly with development teams to identify and remediate vulnerabilities. The role will also establish secure development standards and strengthen application security processes as the organization expands its technology environment and prepares for future hospital operations.
- Develop, implement, and mature Secure Software Development Lifecycle (SSDLC) standards and application security practices.
- Perform manual and automated secure code reviews, identifying vulnerabilities including OWASP Top 10 and CWE Top 25 risks.
- Conduct web application and API security assessments, vulnerability scanning, and penetration testing.
- Utilize Burp Suite, OWASP ZAP, and Metasploit for application testing, vulnerability validation, and controlled exploitation.
- Integrate SAST, DAST, and Software Composition Analysis (SCA) capabilities into CI/CD pipelines.
- Partner directly with developers to remediate vulnerabilities and provide secure coding guidance.
- Assess application security within Microsoft Azure, including identity and access management, network segmentation, and resource-level controls. Senior Application Security Eng…
- Evaluate API security, including authentication, authorization, and data-validation controls.
- Conduct threat modeling and security architecture reviews for new applications and integrations.
- Support security assessments involving AI/ML applications, generative AI, automation, biomedical systems, and connected medical technologies.
- Maintain application security documentation, standards, procedures, and risk-based vulnerability tracking.
- Communicate technical vulnerabilities and business risk effectively to both technical teams and leadership. Senior Application Security Eng…
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Approximately 5+ years of directly relevant, hands-on application security experience, with a strong focus on application security, secure code review, or penetration testing rather than general cybersecurity alone.
- Hands-on experience with Burp Suite, OWASP ZAP, and Metasploit.
- Strong understanding of OWASP Top 10, CWE Top 25, secure coding principles, and common web application vulnerabilities.
- Experience performing manual and automated secure code reviews.
- Experience with web application and API penetration testing, vulnerability validation, and remediation.
- Experience establishing or improving SSDLC practices.
- Working knowledge of SAST, DAST, and SCA technologies such as Checkmarx, Veracode, SonarQube, or similar platforms.
- Experience integrating security testing into CI/CD pipelines.
- Cloud application security experience, particularly within Microsoft Azure. Senior Application Security Eng…
- Strong technical troubleshooting, documentation, risk assessment, and cross-functional communication skills.
- Experience within healthcare, an academic medical center, higher education, or another highly regulated environment.
- Familiarity with HIPAA, HITRUST, NIST CSF 2.0, and related security frameworks.
- Experience with Azure DevOps, GitHub, Adobe Experience Cloud, or comparable enterprise development platforms.
- Experience with threat modeling, security architecture reviews, and secure software supply-chain practices.
- Familiarity with AI/ML security, generative AI security, biomedical systems, connected medical devices, robotics, or automation security. Senior Application Security Eng…
- Experience with QA/test automation and incorporating security assessments into automated testing processes.
Preferred certifications include: OSCP, GWAPT, CSSLP, CEH, and Microsoft Azure Security Engineer Associate (AZ-500).
Benefits
Salary based on experience and qualifications $125,000 - $150,000+
Similar Jobs
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.
Top Skills:
Application Security TestingCloud SecurityCloud Service ProvidersIaasIdentity And Access ManagementIncident ResponsePaasPenetration TestingSaaSSecurity Control FrameworksVulnerability Assessment
Fintech • Financial Services
Owns the engineering lifecycle and operations of enterprise authentication and information security platforms. Maintains Java applications, configures MFA and RADIUS integrations, certifies SafeWord releases, validates security patches, develops Bash and SQL automation, troubleshoots production issues, and supports migration from virtual machines to containerized OpenShift platforms. The role also documents operating procedures and collaborates with operations, security, and engineering teams to maintain secure, resilient authentication services.
Top Skills:
2FaActive DirectoryAppdynamicsAWSBashChallenge/ResponseDnsDockerEcsGCPJavaKerberosKornshellKubernetesLdapLinuxMfaOpenshiftOtpPamPl/SqlRadiusSafewordSAMLShellSplunkSQLSsl/TlsTcp/IpUnix
Software
Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, and prioritizing remediation of high-risk vulnerabilities. The role partners with engineering teams, develops security automation, establishes application security metrics, and communicates risks to technical and nontechnical stakeholders. Responsibilities also include supporting AWS cloud application security, secure coding, infrastructure-as-code security, and maintaining documentation.
Top Skills:
AnsibleAPIsAWSBurpChefCi/CdCloudFormationDastIastInfrastructure As CodeJavaJavaScriptNessusPuppetPythonSaltSastTerraformWeb Application Firewalls
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
