Application Security Engineer I

Ensemble RCM LLC; Blue Ash (OH); Remote; USD 84,000 - 126,000; Full time

Benefits offered by this job

Comprehensive benefits package

Professional certification opportunity

Tuition reimbursement

Quarterly and annual incentive plans

Job summary

Ensemble RCM LLC is hiring an Application Security Engineer I to support secure application testing, vulnerability verification, and safer software delivery. You will work with an application security tool stack and help strengthen secure SDLC practices, including CI/CD integration, with mentorship and hands-on learning.

The role focuses on code analysis, vulnerability verification, and collaboration with development teams to improve security postures.

Qualifications

• Foundational understanding of security tools and vulnerabilities.
• Basic scripting or programming knowledge relevant to security tasks.
• Familiarity with network, application, and system security vulnerabilities.
• Proficiency in scripting and programming languages relevant to security tasks.
• Ability to follow procedures and analyze basic security issues with attention to detail.
• Clear written and verbal communication, including explaining technical issues clearly.
• Ability to convey security issues to non-technical stakeholders.
• Comfort working in team settings with mentorship and feedback.
• Ability to work with a remotely located team across multiple time zones.
• Openness to innovation, including AI, to improve processes and outcomes.

Responsibilities

• Assist in analyzing source code for secure coding practices.
• Use SAST, DAST, and SCA tools to identify vulnerabilities under supervision.
• Help verify tool results and document findings.
• Log and track security issues in ticketing systems.
• Support secure SDLC practices and CI/CD integration.
• Collaborate with developers and operations on basic automation tasks.
• Participate in secure code and design reviews as a learner.
• Generate basic reports and summaries of findings.
• Contribute to security awareness and training efforts.

Skills

Scripting basics

Security tooling

Vulnerability analysis

Team collaboration

Communication

Remote teamwork

Curiosity in cybersecurity

AI for process improvements

Tools

SAST

DAST

SCA

CI/CD

Job description

Ensemble RCM LLC is hiring an Application Security Engineer I for its Cybersecurity Technical Assessments team. This entry-level role is designed to support skill growth while contributing to application security reviews, vulnerability verification, and safer software delivery. You will work with an application security tool stack and help strengthen secure SDLC practices, including CI/CD integration, with some automation.

Why you will like this role

You get a structured path to develop practical application security expertise. The team uses SAST, DAST, and SCA as part of ongoing assessments, with mentorship and hands-on learning through code reviews, secure design reviews, and documented findings. Ensemble RCM LLC also offers a comprehensive benefits package, a professional certification opportunity, and tuition reimbursement to support long-term development.

• Comprehensive benefits including healthcare, time off, retirement, and well-being programs
• Professional certification relevant to your field
• Tuition reimbursement
• Incentive programs available quarterly and annually

What you will do

As an Application Security Engineer I, you will support secure application testing and risk remediation efforts under supervision. Your work will help confirm vulnerability signals, document results, and keep security findings organized for development teams.

• Assist in analyzing source code for secure coding practices
• Use SAST, DAST, and SCA tools to identify vulnerabilities under supervision
• Help verify tool results and document findings
• Log and track security issues in ticketing systems
• Support secure SDLC practices and CI/CD integration
• Collaborate with developers and operations on basic automation tasks
• Participate in secure code and design reviews as a learner
• Generate basic reports and summaries of findings
• Contribute to security awareness and training efforts

What you bring

• Foundational understanding of security tools and vulnerabilities, with basic scripting or programming knowledge
• Familiarity with network, application, and system security vulnerabilities
• Proficiency in scripting and programming languages relevant to security tasks
• Ability to follow procedures and analyze basic security issues with attention to detail
• Clear written and verbal communication, including willingness to explain technical issues
• Ability to convey security issues to non-technical stakeholders
• Comfort working in team settings, with openness to feedback and mentorship
• Ability to work effectively with a remotely located team spanning multiple time zones
• Curiosity and commitment to developing cybersecurity skills
• Openness to innovation, including AI, to explore process improvements and reduce friction while improving patient and client experiences

Location, travel, and eligibility

This is a remote position based in Blue Ash, OH. Candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require. Applicants must reside in the United States and be authorized to work in the United States.

Compensation

$84,000 to $126,000 per year based on experience.

Technologies: SAST, DAST, SCA, CI/CD