This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We have a 4 month contract opportunity for a hands-on Application Security Engineer with 2–4 years of experience embedding security across the Secure SDLC, including application security testing (SAST/DAST/IAST), WAF management, and API security. They bring strong technical judgment, automation-minded problem solving, and the ability to partner closely with development teams to remediate vulnerabilities and strengthen application security in a regulated healthcare environment. 100% Remote. Shift: 40 hours/ week. What makes this role unique is its combination of hands-on engineering and practical security analysis. It offers broad exposure—from application code to cloud infrastructure to SaaS systems—while giving you the chance to build automation that directly improves how teams work. The healthcare environment adds meaningful impact, as the work directly contributes to protecting sensitive patient data.
Job Responsibility:
Implement and enforce the Company’s secure system development life cycle (SSDLC) standard
Administrate the Company’s application security testing (AST) technologies
Work directly with application development teams to ensure application weaknesses and identified vulnerabilities are mitigated or remediated within a standardized SLA
Ensure the implementation and maintenance of application security standards as per industry best practices
Perform architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement
Assist with the auditing of application security and operational configurations
Proactively monitor & remediate application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc.
Create application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties
Continually automate routine operational tasks related to application security and design self-service options to align with best-in-class security standards
Implement application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the SSDLC process
Undertake initiatives/policies to review and generate recommendations for the application security configuration
Requirements:
Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) or equivalent experience
2–4 years of experience embedding security across the Secure SDLC
Application Security Testing
Web Application Firewalls
API Security
Experience with SAST, DAST, IAST, MAST, and WAF (preferred)
Knowledge of .NET Framework, C++, Java, Python
Knowledge of development toolset to design, develop, test, deploy, maintain, and improve software
Experience with static, dynamic, and interactive application scanning tools
Intermediate - Seeks to acquire knowledge in area of specialty
Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
Intermediate - Ability to work independently
CISSP Certified Information Systems Security Professional (preferred)
AWS/Azure Security Specialty (preferred)
Nice to have:
Experience with SAST, DAST, IAST, MAST, and WAF
CISSP Certified Information Systems Security Professional