Application Security Engineer (SSDLC & HIPAA Focus)

Baylor Genetics; United States; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Baylor Genetics in Houston, TX is seeking an Application Security Engineer to build and mature our application security program across web, API, and pipeline apps. You will embed Security by Design across the SDLC, champion HIPAA compliance, and work closely with engineering to remediate findings.

Responsibilities include integrating SonarQube, BURP, SAST/DAST/SCA/IAST, and leading vulnerability management, risk assessments, and audits with cross-functional teams.

Qualifications

• 3–5 years of experience in application security, DevSecOps, or security-focused software engineering.
• Hands-on experience with SonarQube for static code analysis and code quality/security gating.
• Experience with SAST, DAST, SCA, and IAST in CI/CD pipelines.
• Familiarity with OWASP Top 10, attack vectors, and secure coding across Java, C#/.NET, Python, and JavaScript.
• Knowledge of HIPAA, NIST, GDPR compliance considerations for healthcare data.

Responsibilities

• Implement and manage static and dynamic code analysis tooling in CI/CD and pipelines.
• Perform penetration tests and vulnerability assessments across web, API, and pipeline apps; lead remediation.
• Develop a structured remediation program to resolve security findings quickly.
• Evolve SDLC into a Secure SDLC by embedding Security by Design and Privacy by Design.
• Provide guidance on secure coding, threat modeling, and secure architecture reviews.
• Generate reports on security initiatives, vulnerabilities, and risk for technical and executive audiences.
• Collaborate with auditors and cross-functional teams; draft security policies and procedures.
• Partner with IT, Privacy, Compliance, and business units to reduce risk.

Skills

Application security

DevSecOps

Threat modeling

Secure coding practices

CI/CD integration

Vulnerability management

OWASP Top 10

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

SonarQube

Burp Suite

SAST

DAST

SCA

IAST

Job description

Baylor Genetics in Houston, TX is seeking an Application Security Engineer to build and mature our application security program across web, API, and pipeline apps. You will embed Security by Design across the SDLC, champion HIPAA compliance, and work closely with engineering to remediate findings.

Responsibilities include integrating SonarQube, BURP, SAST/DAST/SCA/IAST, and leading vulnerability management, risk assessments, and audits with cross-functional teams.