Principal Application Security Engineer

Henry Schein; Seattle (WA); Remote; USD 139,000 - 208,000; Full time

Job summary

An innovative firm is seeking a seasoned security expert to lead its application security program. In this pivotal role, you'll drive the strategy and implementation of security measures across development, quality assurance, and IT systems. Your expertise will shape secure product designs and influence technical decisions, while mentoring junior engineers. This position offers a unique opportunity to impact the security landscape in a collaborative environment, with competitive compensation and excellent benefits. Join a forward-thinking company that values innovation and teamwork, and take your career to new heights.

Benefits

Medical, Dental and Vision Coverage

401K Plan with Company Match

Unlimited PTO

Paid Parental Leave

Short Term Disability

Work Life Assistance Program

Health Savings Accounts

Education Benefits

Worldwide Scholarship Program

Volunteer Opportunities

Qualifications

• 10+ years of experience in Information Security and Software Engineering.
• Excellent knowledge of secure application programming and coding life cycles.
• Ability to communicate security objectives to various audiences.

Responsibilities

• Lead the application security program across various departments.
• Mentor junior engineers and influence technical decisions.
• Conduct security reviews and create secure coding policies.

Skills

Information Security

Software Engineering

Secure Application Programming

Security Principles

Threat Assessments

Reverse Engineering Techniques

Risk Assessment

Communication Skills

Education

Bachelor's Degree in Computer Science

Equivalent Professional Working Experience

Tools

Secure Coding Policies

Security Testing Tools

Data Storage Formats

Job description

We are open to this role working 100% remote within the United States. Unfortunately, Henry Schein One is unable to hire individuals residing in Alaska, North Dakota, Hawaii, West Virginia, Maryland, Delaware, Puerto Rico or other US Territories at this time. This role is a W2 role and will not consider C2C candidates.

Job Summary

This position is responsible for leading department-wide focus on the strategy, development, implementation, and maintenance of the application security program across research, development, quality assurance, support, and IT systems. This is a high level, conceptual, as well as hands-on position that requires a great deal of general security experience, as well as application development experience and secure coding knowledge.

What You Will Do

• Mentor junior engineers by leading and influencing technical decisions, processes, and best practices with the ability to explain technical concepts in written and verbal forms


• Advise and participate in the design of secure products and architectures


• Perform architecture security reviews, security focused code reviews, and security testing


• Create or approve documentation that codifies the application security program: this will include the development of secure coding policies, procedures and standards, modification of the SDLC to include the necessary security checkpoints, product deployment, and code review methodologies


• Evaluate potential security related issues and make recommendations on third party tools and components


• Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture


• Monitor software usage and perform forensics to verify that the software and infrastructure is performing to the required security standards


• Perform constant monitoring and awareness of key developments in the area of systems, web application, and client application security in order to provide direction of security trends, and anticipate emerging standards and best practices


• Provide leadership, guidance and direction to security resources and be an influencer of development, systems, support, and quality assurance teams


• Participate in public security projects and or volunteer time and knowledge to improve the broader security community, representing the company's mission and goals, as well as promoting cooperation and knowledge sharing


• Attend all meetings necessary for the seamless delivery of the product as part of the software development lifecycle

Qualifications

What you Will Have

• 10+ years of relevant Information Security and/or Software Engineering experience


• Bachelor's Degree in Computer Science, Information Security or a related field or equivalent professional working experience


• Excellent knowledge of secure application programming, coding life cycles and design


• Excellent understanding of security principles, best practices architectures, tools, and processes


• Advanced knowledge of multiple current operating systems and hosting environments


• Excellent knowledge of software and network architecture and standards


• Excellent knowledge of authentication protocol building blocks and methods


• Excellent ability to conduct threat assessments and assess risk


• Excellent ability to create and maintain risk-based measures and build security processes that work within various development methodologies


• Excellent ability to communicate security objectives to a variety of audiences


• Excellent knowledge of reverse engineering techniques and tools


• Excellent ability to implement code derived from technical specifications


• Advanced knowledge of data storage formats, tools and languages


• Knowledge of a variety of programming languages leveraged in the products being secured

Nice to Haves

• One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP

The posted range for this position is $139,000 - $208,000 which is the expected starting base salary range for an employee who is new to the role to fully proficient in the role. Many factors go into determining employee pay within the posted range including prior experience, current skills, location/labor market, internal equity, etc. This position is eligible for a 15% bonus not reflected in the posted range.

What you get as a Henry Schein One Employee

• A great place to work with fantastic people


• A career in the healthcare technology industry, with the ability to grow and realize your full potential


• Competitive compensation


• Excellent benefits package! Medical, Dental and Vision Coverage, 401K Plan with Company Match, Unlimited PTO, Paid Parental Leave, Short Term Disability, Work Life Assistance Program, Health Savings and Flexible Spending Accounts, Education Benefits, Worldwide Scholarship Program, Volunteer Opportunities, and more

About Henry Schein One

Henry Schein One?is the global leader in dental management, analytics, communication, and marketing software. Our company's products and services work together as one simple solution to provide users with a seamless and integrated experience.

Our company thrives because of our people. We believe in supportive, diverse, and inclusive workforce, inclusive environments, professional development opportunities, and competitive compensation packages. We value innovation, teamwork, and encourage work-life balance.

One of many reasons why Henry Schein One leads the industry is because of our products, services and most importantly, our people.

In 2022, Henry Schein One was named one of Best Companies to Work for in Utah. Click here for more information: 2022 Best Companies to Work For | Henry Schein One

Henry Schein, Inc. is an Equal Employment Opportunity Employer and does not discriminate against applicants or employees on the basis of race, color, religion, creed, national origin, ancestry, disability that can be reasonably accommodated without undue hardship, sex, sexual orientation, gender identity, age, citizenship, marital or veteran status, or any other legally protected status.