Remote Application Security Strategist

LCH Lab. Corp. of America Holdings; North Carolina; On-site; USD 160,000 - 170,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life insurance

STD/LTD

401(k)

PTO/FTO

Tuition Reimbursement

Employee Stock Purchase Plan

Job summary

Labcorp seeks an Application Security Strategist to strengthen its secure design practices and guide developers across web, API, and microservices ecosystems. You will translate complex risks into actionable guidance while collaborating with engineers, architects, and product teams to embed security by design.

The role emphasizes cloud-native security in AWS/Azure, OAuth 2.0/OIDC/SAML, and ongoing modernization of security patterns for AI-enabled and distributed applications.

Qualifications

• 8+ years of combined experience across application security and software development.
• 5+ years applying secure coding principles and designing or securing web apps, APIs, and microservices.
• 3+ years with enterprise security frameworks (NIST CSF, CIS Controls, ISO 27001).
• 2+ years securing cloud-native applications in AWS or Azure with OAuth 2.0, OIDC, and SAML.

Responsibilities

• Define and document secure development standards for web, API, and microservice architectures.
• Develop reusable patterns and reference implementations for secure design.
• Translate risks into developer-friendly guidance and support secure-by-design practices.
• Collaborate with engineers and architects to guide secure design decisions and data protection.
• Lead standardization of application security risk management across teams.

Skills

Application security

Secure coding

Cloud security

OAuth 2.0 / OIDC / SAML

Cross-functional collaboration

Education

Security certifications (CSSLP, GWAPT, CISSP)

Tools

SAST tools

DAST tools

SCA tools

IAM platforms (Okta / Entra ID / SailPoint)

Job description

Labcorp seeks an Application Security Strategist to strengthen its secure design practices and guide developers across web, API, and microservices ecosystems. You will translate complex risks into actionable guidance while collaborating with engineers, architects, and product teams to embed security by design.

The role emphasizes cloud-native security in AWS/Azure, OAuth 2.0/OIDC/SAML, and ongoing modernization of security patterns for AI-enabled and distributed applications.