Applications Security Engineer II

Role overview

An Application Security Engineer II helps protect software and services by applying security and privacy principles throughout the secure software development lifecycle. The role combines application reviews and vulnerability response with security engineering and automation, working with teams to improve designs, address findings, and build repeatable safeguards.

Responsibilities

- Review application architecture, security designs, code, and operational configurations to identify weaknesses and recommend improvements. - Conduct threat modeling, security assessments, and hardening reviews across the development lifecycle. - Monitor and help remediate security alerts and vulnerabilities, including malware, injection attacks, and unauthorized access risks. - Implement safeguards such as authentication, authorization, encryption, logging, and application security testing. - Create security documentation and operating procedures, report findings, and coordinate their resolution with relevant teams. - Automate recurring security operations and develop self-service options that support consistent security practices.

Requirements

- Bachelor’s degree in a quantitative, business, or technical field and 2–4 years of related experience, or equivalent demonstrated knowledge and skills. - Experience administering, configuring, or implementing SaaS systems or software; healthcare domain experience is relevant. - Familiarity with static and dynamic application scanning tools and the software development toolset. - Knowledge of one or more of .NET, C++, Java, or Python. - Ability to investigate problems, draw sound conclusions, and work independently. - Authorization to work in the United States without current or future employment-based visa sponsorship.

Nice to have

Security+; CISSP; CISM; CIAM; or an AWS or Azure security specialist certification.