Senior Application Security Engineer (Remote)

Medidata Solutions, Inc.; Houston (TX); Remote; USD 103,000 - 137,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

Disability insurance

401(k) matching

Family leave

Flexible PTO

10 paid holidays

Job summary

Medidata Solutions, Inc. is seeking a security-focused software architect for the Information Security Application Architecture team.

You will design, review, and enforce secure SDLC practices across multiple applications, working with engineering, privacy, and DevOps to implement security standards and threat modeling. Responsibilities include SAST/DAST analysis, secure release pipelines, and guiding secure coding across Java/.NET, Python, and JavaScript stacks, with cloud and on-prem hosting.

Qualifications

• Bachelor's degree (or above) in Computer Science/Engineering, Information Technology or comparable required 3-5 years of related experience
• AWS or Vendor Agnostic Cloud Management Certification is a plus
• CISSP or equivalent certification is a bonus
• Source Code & Artifact Management: Git, GitHub, Artifactory
• CI & CD Pipelines: GitHub Actions
• Scripting languages: Python, Typescript
• Programming languages: Java, .NET
• Hosting Architectures: Cloud & Self Hosted
• Security Exercises: SAST, DAST

Responsibilities

• Integrate secure SDLC practices into the development lifecycle, including conducting static and dynamic code analysis (SAST/DAST), managing open-source components, threat modeling, and performing architectural security reviews
• Manage and optimize source code control and source code management (SCM) systems to ensure secure, streamlined release pipelines
• Leverage fundamental knowledge of programming, application engineering, and common coding patterns to guide best-practice architecture and implementation
• Apply working knowledge of web-related technologies (Web Services, SOA and OO Architectures) and network/web protocols (HTTP) to maintain robust system communication
• Support modern infrastructure deployment protocols by managing Infrastructure as Code (IaC) and executing Kubernetes Cluster Administration
• Leverage experience with HTML, JavaScript, and a deep understanding of the HTTP protocol to optimize frontend integrations and web security
• Utilize hands-on development experience across various coding languages including .NET (C#), Java, Ruby, Python, JavaScript, TypeScript, AngularJS, and ReactJS to review and improve codebase integrity
• Implement and maintain data solutions across Relational Databases (e.g., MySQL, MS SQL, Oracle) and Non-Relational Databases (e.g., MongoDB, DynamoDB, Redis)
• Supporting and managing Secure AI workflows in both SDLC and App Features backed by AI
• Apply a strong understanding of information security principles and web application vulnerabilities to proactively identify, mitigate, and defend against malicious code and common hacker techniques
• Collaborating with other functions to deploy and maintain solutions cost-effectively

Skills

Python

TypeScript

Java

.NET

Education

Bachelor's degree in Computer Science/Engineering or Information Technology

Tools

Git

GitHub

Artifactory

GitHub Actions

HTML

JavaScript

TypeScript

AngularJS

ReactJS

Job description

Medidata Solutions, Inc. is seeking a security-focused software architect for the Information Security Application Architecture team.

You will design, review, and enforce secure SDLC practices across multiple applications, working with engineering, privacy, and DevOps to implement security standards and threat modeling. Responsibilities include SAST/DAST analysis, secure release pipelines, and guiding secure coding across Java/.NET, Python, and JavaScript stacks, with cloud and on-prem hosting.