Secures software and cloud systems by reviewing code, modeling threats, automating security controls, and running attack simulations, while partnering with Engineering to prioritize and close vulnerabilities.
Senior Security Engineer II - Application Security
📜 Description
- Design, build, and operate solutions that continuously improve and automate security capabilities.
- Analyze security trends, metrics, and opportunities, then work with stakeholders to improve security posture.
- Lead incident and issue response, including analysis, containment, mitigation, and remediation.
- Develop and refine security program policies, standards, baselines, and operating procedures.
- Mentor and coach junior engineers and analysts.
🛠️ Requirements
- BS/BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 10 years security domain experience without degree
- 6+ years of experience in securing and deploying applications within Cloud Native environments
- 3+ years of experience in a dedicated application security role with focus on establishing secure SDLC and DevSecOps processes
- Application Security
- Knowledge of health-tech systems, like Electronic Health Records, Clinical data, PHI, etc, direct experience preferred.
- Experience architecting, developing, and deploying large-scale distributed systems at scale.
- Extensive experience identifying, evaluating and triaging vulnerabilities with Static/Dynamic Application Security Testing (SAST/DAST) methodologies and tools.
- Proven experience conducting code reviews, and threat modeling.
- Extensive experience with developing automated security testing and validation systems using Terraform, Cloudformation, Python, etc.
- Proficient in coding languages such as Python, R, C++, Javascript.
✨ Benefits
- Flexible work schedules and remote work availability for many roles.
- Health insurance paid up to 80%.
- Dental insurance paid up to 80%.
- Vision insurance paid up to 80%.
- 21 days of PTO in the first year.
- Two paid volunteer days and 11 paid holidays.
- 12 weeks of paid parental leave for all new parents.
- Six-week paid sabbatical after six years of service.
Full job description
Primary Duties:
Minimum Qualifications:
Preferred Knowledge, Skills, and/or Abilities:
Physical Requirements
Similar jobs
Search more Cybersecurity Engineer jobsThe Security Architect designs and oversees security across cloud, product, and enterprise systems, combining blockchain and application security expertise to strengthen controls, detection, incident response, and secure development.
Own and strengthen the unclassified environment’s cybersecurity posture by implementing NIST SP 800-171 and CMMC Level 2 controls, conducting self-assessments, maintaining audit evidence, and vetting tools and vendors.
As a Senior Security Engineer, you will own endpoint detection and cloud security, lead incident response, and establish security policies to protect Kin's data and systems.
Enterprise Security Engineer
Designs and maintains secure enterprise infrastructure across on-premises and cloud environments, setting architecture standards, governing identity and access, and strengthening security monitoring and detection.
