Remote Application Security Lead (SSDLC & Pentests)

Baylor Miraca Genetics Laboratories LLC; Houston (TX); Hybrid; USD 100,000 - 170,000; Full time

Job summary

Baylor Genetics is seeking an Application Security Engineer to build and mature our application security program, embedding security across the SDLC and championing Security by Design. The role protects sensitive patient data across web, API, and pipeline apps and supports HIPAA compliance.

You will implement static/dynamic analysis tooling, lead remediation, and collaborate with IT, Privacy, and Compliance to reduce risk in a fast-paced environment.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field - or an equivalent combination of education and experience.
• Minimum of 3-5 years of experience in application security, DevSecOps, or software engineering with a security focus.
• Hands-on experience with SonarQube for static code analysis and code quality/security gating.
• Experience with SAST, DAST, SCA, and IAST tooling and integrating them into CI/CD pipelines.
• Familiarity with penetration testing, code review, and vulnerability management processes.
• Understanding of compliance frameworks and regulations relevant to healthcare data, including HIPAA, NIST, and GDPR.

Responsibilities

• Implement and manage static and dynamic code analysis, integrating SonarQube (and complementary SAST/DAST/SCA tools) into CI/CD pipelines and check-in scans, and partnering with engineering to triage and remediate findings.
• Perform penetration tests and vulnerability assessments across web, API, and pipeline applications, and lead consistent, timely remediation of identified findings.
• Develop and maintain a structured remediation program that addresses and resolves security findings quickly, consistently, and in priority order.
• Evolve Baylor Genetics' SDLC into a Secure SDLC (SSDLC) by embedding Security by Design and Privacy by Design principles at every stage.
• Integrate secure coding practices with development teams, providing guidance, threat modeling, and secure architecture reviews for new features and releases.
• Generate regular reports on the status of application security initiatives, vulnerability management, and risk assessments for technical and executive audiences.
• Collaborate with auditors during internal and external audits, providing explanations, evidence, and documentation, and drafting security policies and procedures as needed.
• Partner cross-functionally with IT, Privacy, Compliance, and business units to support initiatives and drive measurable risk reduction.

Skills

SonarQube

DevSecOps

SAST/DAST/IAST/SCA

CI/CD pipelines

Penetration testing

Vulnerability management

HIPAA/NIST/GDPR knowledge

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Security

Tools

SonarQube

Burp Suite

CI/CD tooling

Job description

Baylor Genetics is seeking an Application Security Engineer to build and mature our application security program, embedding security across the SDLC and championing Security by Design. The role protects sensitive patient data across web, API, and pipeline apps and supports HIPAA compliance.

You will implement static/dynamic analysis tooling, lead remediation, and collaborate with IT, Privacy, and Compliance to reduce risk in a fast-paced environment.