Senior Security Engineer

Job Summary

To support a growing healthcare initiative, the remote Senior Security Engineer will identify and remediate security vulnerabilities in Java-based applications, design security controls for APIs, and integrate security tooling across CI/CD pipelines while ensuring compliance with industry standards.

Key responsibilities

• Identify, assess, and remediate security vulnerabilities in Java applications and protect ecommerce platforms against various threats
• Design and enforce security controls for REST and GraphQL APIs, implementing strong authentication and authorization strategies
• Integrate and manage security tooling across CI/CD pipelines, ensuring secure coding standards and infrastructure-as-code security

Required qualifications

• 5+ years of experience in Security Engineering, DevSecOps, or DevOps roles
• Strong hands-on experience securing Java-based web applications, particularly with Spring Boot and microservices
• Deep understanding of OWASP Top 10 and ecommerce attack patterns
• Proven experience securing applications in AWS cloud environments
• Hands-on experience with CI/CD security tooling, including SAST, SCA, and DAST solutions