Application Security Engineer — SSDLC & HIPAA Focus

Baylor Miraca Genetics Laboratories, LLC; Georgia; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Baylor Genetics is seeking an Application Security Engineer to mature our security program across web, API, and data pipelines. You will embed Security by Design and Privacy by Design across the SDLC and partner with engineering to remediate findings.

You will drive secure coding practices, perform tests and audits, and report on risk to technical and executive audiences, ensuring HIPAA compliance and risk reduction across the organization.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• 3–5 years of experience in application security, DevSecOps, or security-focused software engineering.
• Hands-on experience with SonarQube for static code analysis and security gating.
• Experience with SAST, DAST, SCA, and IAST tooling in CI/CD pipelines.
• Knowledge of OWASP Top 10, attack vectors, and secure coding in Java, C#/.NET, Python, JavaScript.
• Familiarity with HIPAA, NIST, and GDPR compliance.

Responsibilities

• Implement and manage static and dynamic code analysis tools (SonarQube, BURP) in CI/CD; triage and remediate findings.
• Perform penetration tests and vulnerability assessments across web, API, and pipeline apps; drive remediation.
• Develop and maintain a remediation program to address findings quickly and prioritise risk.
• Evolve SDLC into a Secure SDLC by embedding Security by Design and Privacy by Design.
• Guide secure coding, threat modeling, and secure architecture reviews for new features.
• Generate reports on application security status, vulnerability management, and risk assessments for technical and executive audiences.
• Collaborate with auditors during internal/external audits; draft security policies and procedures as needed.
• Partner with IT, Privacy, Compliance, and business units to drive risk reduction.

Skills

Security testing

CI/CD security

SonarQube

Burp Suite

OWASP Top 10

Healthcare compliance

Education

Bachelor's degree in CS/Info Security

Tools

SonarQube

Burp Suite

SAST

DAST

SCA

IAST

Job description

Baylor Genetics is seeking an Application Security Engineer to mature our security program across web, API, and data pipelines. You will embed Security by Design and Privacy by Design across the SDLC and partner with engineering to remediate findings.

You will drive secure coding practices, perform tests and audits, and report on risk to technical and executive audiences, ensuring HIPAA compliance and risk reduction across the organization.