Application Security Engineer

Overview

Application Security Engineer responsible for operating application security tools, conducting DAST scans, validating vulnerabilities, and supporting remediation and compliance across healthcare information systems.

What you'll do

• Administer and enhance application security tool environments.
• Develop automation scripts for recurring tasks, preferably in Python.
• Configure and execute authenticated and unauthenticated DAST scans for web applications and APIs.
• Tune scanning profiles and manage scan scheduling, configuration, and coverage.
• Validate, categorize, prioritize, and document vulnerabilities.
• Partner with development and platform teams to support remediation and verify fixes.
• Build solutions that present vulnerability and compliance data to leadership.

What you'll need

• Bachelor’s degree.
• 3–6 years of experience.
• Experience administering Qualys VM or application security tools.
• Knowledge of AWS or Azure cloud environments.
• Experience developing or testing RESTful APIs with Postman and/or Swagger files.
• Familiarity with software security requirements and compliance programs such as NIST, HITRUST, or FedRAMP.
• Strong communication, analytical, collaboration, and independent-working skills.

Nice to have

• Experience administering Qualys or WebInspect vulnerability management and application security modules.

Details

• Hybrid work arrangement in India.
• Travel may include up to 10%.