Senior Application Security Engineer | Secure Enterprise Apps

10 HOSP Ann & Robert H. Lurie Children's Hospital of Chicago; Chicago (IL); On-site; USD 94,000 - 154,000; Full time

Benefits offered by this job

Medical benefits

PTO & holidays

Retirement plan

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking an Application Security Engineer to implement, validate, and maintain security controls across all tiers of the hospital’s application stack.

You will work with infrastructure, vulnerability management, and vendors to identify, remediate, and prevent application-layer risks, ensuring secure-by-default deployments. The role focuses on risk reduction across a large portfolio of applications, enforcing authentication, encryption, and

Qualifications

• Bachelor's degree plus 3–7+ years in application security, cybersecurity, or enterprise app support.
• Healthcare provider environment preferred; security certifications beneficial but not required.

Responsibilities

• Serve as the central authority for application and integration risk across 250+ apps.
• Identify and reduce application-layer risk across third-party apps, APIs, and integrations.
• Interface with vendors, app owners, and other departments as needed.
• Assess internet-facing apps and prioritize high-risk remediations.
• Enforce authentication, authorization, credential management, encryption, and secure communications.
• Collaborate with owners and vendors to fix insecure configurations and access issues.
• Evaluate apps through procurement, implementation, and ongoing operations.
• Support third-party risk management through data flows and exposure points.
• Drive remediation of vulnerabilities from scans and security testing.
• Improve visibility and governance of app security posture.

Skills

Application security

Vulnerability management

OAuth/SSO

Encryption & data protection

OWASP Top 10

Vendor risk management

Cross-functional collaboration

Security monitoring

Threat modeling

Education

Bachelor’s Degree in Computer Science, Information Security, Information Systems, or related field

Tools

Qualys

Qualys WAS

Metasploit

SAST/DAST

Configuration/exposure analysis tools

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking an Application Security Engineer to implement, validate, and maintain security controls across all tiers of the hospital’s application stack.

You will work with infrastructure, vulnerability management, and vendors to identify, remediate, and prevent application-layer risks, ensuring secure-by-default deployments. The role focuses on risk reduction across a large portfolio of applications, enforcing authentication, encryption, and