Senior Application Security Engineer

Lurie Children's; Chicago (IL); On-site; USD 94,000 - 154,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Life and disability insurance

PTO, holidays and parental leave

401(k) with employer match

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago seeks an IT Systems Engineer Sr focused on application security to implement and maintain controls across the hospital’s application stack.

You will partner with infrastructure, vulnerability management, and vendors to identify and remediate risks, ensuring secure-by-default deployments. The role emphasizes hands-on validation, configuration enforcement, and risk reduction across more than 250 applications, with exposure to OWASP Top 10, CIS

Qualifications

• Bachelor’s degree or equivalent work experience in computer science, information security, or related field.
• 3–7+ years of experience in application security or enterprise application support.
• Healthcare provider experience is desirable.
• Security certifications such as CISSP, CSSLP, GWAPT, CASE, CEH, OSCP or equivalent are beneficial but not required.

Responsibilities

• Implement and enforce secure configurations across the application stack (DB, middleware, API, web, presentation).
• Collaborate with vendors, owners, and other teams to remediate application-layer risks.
• Drive remediation based on vulnerability scans (e.g., Qualys) and security testing of externally facing systems.
• Lead security controls for authentication, authorization, credential and secret management, encryption and secure communications.

Skills

Application security

Vulnerability management

SSO / OAuth

Credentials management

Secrets handling

Encryption

WAF / Firewall

Vendor collaboration

Risk remediation

Education

Bachelor’s Degree in Computer Science or related field

Tools

Qualys

Qualys WAS

Metasploit

SAST/DAST tools

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago seeks an IT Systems Engineer Sr focused on application security to implement and maintain controls across the hospital’s application stack.

You will partner with infrastructure, vulnerability management, and vendors to identify and remediate risks, ensuring secure-by-default deployments. The role emphasizes hands-on validation, configuration enforcement, and risk reduction across more than 250 applications, with exposure to OWASP Top 10, CIS