Application Security Engineer I, Cybersecurity

Ensemble RCM; United States; Remote; USD 84,000 - 126,000; Full time

Benefits offered by this job

Healthcare benefits

Time off

Retirement plan

Well-being programs

Job summary

Ensemble RCM is seeking an Entry-level Application Security Engineer I to join the Cybersecurity Technical Assessments team. You will learn and support the Application Security tool stack, identify vulnerabilities, and collaborate with development teams to remediate risks.

The role focuses on integrating security into the software development lifecycle and automating basic security tasks. You will gain experience with SAST/DAST/SCA tools under supervision, document findings, and contribute to

Qualifications

• Foundational understanding of security tools and vulnerabilities.
• Basic scripting or programming knowledge.
• Ability to follow procedures and analyze basic security issues.

Responsibilities

• Assist in analyzing source code for secure coding practices.
• Use SAST/DAST/SCA tools under supervision to identify vulnerabilities.
• Log and track security issues in ticketing systems.
• Support secure SDLC practices and CI/CD integration.
• Collaborate with developers and operations on basic automation tasks.
• Generate basic reports and summaries of findings.

Skills

Security fundamentals

Scripting basics

Programmatic thinking

Tools

SAST

DAST

SCA

Job description

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.
• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.
• Striving for Excellence: Execute at a high level by demonstrating our "Best in KLAS" Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

The Application Security Engineer I is an entry-level role on the Cybersecurity Technical Assessments team. This position focuses on learning and supporting the Application Security tool stack, assisting in identifying and verifying vulnerabilities, and collaborating with development teams to remediate risks. The engineer will gain experience integrating security into the software development lifecycle and automating basic security tasks.

Essential Job Functions:

• Assist in analyzing source code for secure coding practices.
• Use SAST, DAST, and SCA tools under supervision to identify vulnerabilities.
• Help verify tool results and document findings.
• Log and track security issues in ticketing systems.
• Support secure SDLC practices and CI/CD integration.
• Collaborate with developers and operations on basic automation tasks.
• Participate in secure code and design reviews as a learner.
• Generate basic reports and summaries of findings.
• Contribute to security awareness and training efforts.

Job Competencies:

Technical Proficiency:

Foundational understanding of security tools and vulnerabilities; basic scripting or programming knowledge.

Familiarity with network, application, and system security vulnerabilities.

Proficiency in scripting and programming languages relevant to security tasks.

Analytical Skills:

Ability to follow procedures and analyze basic security issues.

Keen attention to detail in identifying and addressing security vulnerabilities

Communication Skills:

Clear written and verbal communication; willingness to learn how to explain technical issues.

Ability to convey security issues to non-technical stakeholders.

Team Collaboration:

Works well in team settings; open to feedback and mentorship.

Ability to work effectively with a remotely located team potentially spanning multiple time zones.

Continuous Learning:

Demonstrates curiosity and commitment to developing cybersecurity skills.

This position pays between $84,000-126,000 based on experience

Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences.

This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require.

This posting addresses state specific requirements to provide pay transparency. Compensation decisions consider many job-related factors, including but not limited to geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; time in position. A candidate entry rate of pay does not typically fall at the minimum or maximum of the role's range.

Join an award-winning company

• Five-time winner of "Best in KLAS" 2020-2022, 2024-2025
• Black Book Research's Top Revenue Cycle Management Outsourcing Solution 2021-2024
• 22 Healthcare Financial Management Association (HFMA) MAP Awards for High Performance in Revenue Cycle 2019-2024
• Leader in Everest Group's RCM Operations PEAK Matrix Assessment 2024
• Clarivate Healthcare Business Insights (HBI) Revenue Cycle Awards for strong performance 2020, 2022-2023
• Energage Top Workplaces USA 2022-2024
• Fortune Media Best Workplaces in Healthcare 2024
• Monster Top Workplace for Remote Work 2024
• Great Place to Work certified 2023-2024

Innovation

Work-Life Flexibility

Leadership

Purpose + Values

Bottom line, we believe in empowering people and giving them the tools and resources needed to thrive. A few of those include:

• Associate Benefits - We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs.
• Our Culture - Ensemble is a place where assoc