Application Security Engineer

Hopeghospital; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Hopeghospital is seeking an Application Security Engineer to protect software across the SDLC and strengthen its security posture in a fast-paced healthcare environment.

You will identify vulnerabilities, perform tests, and work with developers to remediate risks using secure coding practices and modern security tools in a US-based setting.

Qualifications

• Experience in application security risk assessment.
• Knowledge of OWASP Top 10 and secure coding practices.
• Experience with SAST/DAST and security testing tools.
• Ability to work with CI/CD pipelines and DevSecOps practices.
• Strong collaboration with developers to remediate vulnerabilities.

Responsibilities

• Identify and remediate application security vulnerabilities
• Conduct security assessments and penetration testing
• Implement secure coding standards and practices
• Perform static and dynamic security testing
• Integrate security tools into CI/CD pipelines
• Review application architecture for security risks
• Monitor threats and manage security incidents
• Collaborate with developers on vulnerability remediation

Skills

Application security

Vulnerability assessment

OWASP Top 10

Penetration testing

SAST/DAST

DevSecOps

CI/CD security

Threat modeling

Programming / scripting

Job description

Application Security Engineers protect software applications by identifying vulnerabilities, implementing secure coding practices, conducting penetration tests, and strengthening cybersecurity throughout the software development lifecycle efficiently.

Responsibilities

• Identify and remediate application security vulnerabilities
• Conduct security assessments and penetration testing
• Implement secure coding standards and practices
• Perform static and dynamic security testing
• Integrate security tools into CI/CD pipelines
• Review application architecture for security risks
• Monitor threats and manage security incidents
• Collaborate with developers on vulnerability remediation

Required Skills

• Application security and vulnerability assessment
• OWASP Top 10 security knowledge
• Penetration testing and ethical hacking
• SAST, DAST, and security testing tools
• DevSecOps and secure CI/CD implementation
• Programming, scripting, and threat modeling

Note: Salary depends on experience, skills, location, and is paid in local currency.