Application Security Engineer - SSDLC Leader (Hybrid)

Baylor Genetics; United States; Ibrido; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Baylor Genetics is seeking an Application Security Engineer to build and mature our security program across web, API, and pipeline apps. You will implement SonarQube and BURP in CI/CD, work with engineering to remediate findings, and close gaps in secure coding and code reviews. This role supports HIPAA compliance and reduces organizational risk.

The engineer will collaborate with IT, Privacy, and Compliance to drive measurable risk reduction and evolve the SSDLC in a healthcare setting.

Competenze

• Bachelor's degree required or equivalent combination of education and experience.
• Minimum 3–5 years of application security, DevSecOps, or security-focused software engineering.
• Hands-on experience with SonarQube for static code analysis and code quality gating.
• Experience with SAST/DAST/SCA/IAST tooling and integrating them into CI/CD pipelines.
• Familiarity with OWASP Top 10, secure coding practices in Java, C#/.NET, Python, and JavaScript.

Mansioni

• Implement and manage static and dynamic code analysis, integrating SonaQube and other tools into CI/CD pipelines.
• Perform penetration tests and vulnerability assessments across web, API, and pipeline applications; lead remediation.
• Develop and maintain a remediation program to address security findings quickly and prioritize risks.
• Evolve SDLC into a Secure SDLC by embedding Security and Privacy by Design principles.
• Provide guidance on threat modeling and secure architecture reviews for new features.
• Generate regular reports on application security initiatives and risk assessments for technical and executive audiences.
• Collaborate with auditors and draft security policies and procedures as needed.
• Partner with IT, Privacy, Compliance, and business units to reduce risk.

Conoscenze

Application security

DevSecOps

Code analysis

Penetration testing

Secure coding

Risk assessment

CI/CD

Communication

Cross-functional collaboration

Formazione

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Strumenti

SonarQube

SAST/DAST/SCA/IAST tooling

Descrizione del lavoro

Baylor Genetics is seeking an Application Security Engineer to build and mature our security program across web, API, and pipeline apps. You will implement SonarQube and BURP in CI/CD, work with engineering to remediate findings, and close gaps in secure coding and code reviews. This role supports HIPAA compliance and reduces organizational risk.

The engineer will collaborate with IT, Privacy, and Compliance to drive measurable risk reduction and evolve the SSDLC in a healthcare setting.