Remote Application Security Engineer — SSDLC Champion

Baylor Genetics; Houston, Northern (TX, KY); Hybrid; USD 125,000 - 150,000; Full time

Job summary

Baylor Genetics is seeking an Application Security Engineer to build and mature our application security program, embedding security across the software development lifecycle (SDLC) and champion Security by Design principles.

As a leader in clinical genetic testing, we handle highly sensitive patient data across our web, API, and pipeline applications, and this role is central to protecting that data and reducing risk.

Qualifications

• Bachelor's degree in CS, Cybersecurity, Information Security, or related field, or equivalent experience.
• 3–5 years in application security, DevSecOps, or security-focused software engineering.
• Hands-on with SonarQube for static analysis and code quality gating.
• Experience with SAST/DAST/SCA/IAST tooling in CI/CD pipelines.
• Familiarity with penetration testing, code review, and vulnerability management.
• Understanding of HIPAA, NIST, GDPR compliance.

Responsibilities

• Implement and manage static and dynamic code analysis, integrating SonarQube and other tooling into CI/CD pipelines and triage remediation.
• Perform penetration tests and vulnerability assessments across web, API, and pipeline applications and lead remediation.
• Develop and maintain a remediation program to address security findings quickly and effectively.
• Evolve SDLC into a Secure SDLC by embedding Security by Design and Privacy by Design.
• Provide guidance on secure coding, threat modeling, and secure architecture reviews for new features.
• Generate reports on security initiatives, vulnerability management, and risk for technical and executive audiences.
• Collaborate with auditors during internal and external audits and draft security policies as needed.
• Partner with IT, Privacy, Compliance, and business units to drive measurable risk reduction.

Skills

Security mindset

DevSecOps experience

Penetration testing

Vulnerability management

HIPAA/NIST/GDPR knowledge

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

SonarQube

SAST

DAST

SCA

IAST

Job description

Baylor Genetics is seeking an Application Security Engineer to build and mature our application security program, embedding security across the software development lifecycle (SDLC) and champion Security by Design principles.

As a leader in clinical genetic testing, we handle highly sensitive patient data across our web, API, and pipeline applications, and this role is central to protecting that data and reducing risk.