Application Security Engineer

Summary

Join Aya Healthcare as an Application Security Engineer and contribute to the security of their applications while working closely with a talented team.

Requirements

• Bachelor’s degree preferred, and/or equivalent experience
• 5+ years’ experience in software, product, or application security
• Familiarity with one or more programming languages, such as C#, PHP, Python, and Java
• Experience with Agile Development Methodologies
• Understanding and experience with OWASP Top 10 Risks, software security maturity models (such as SAMM or BSIMM), and secure software development lifecycle (SLDC) processes/techniques
• Experience performing software threat modeling, such as STRIDE
• Self-starter requiring minimal supervision
• Strong tendency to action and able to work in a fast-paced environment
• Experience in an Azure Environment are preferred
• Industry certifications (Security+, GWAPT, OSCP, CISSP) are preferred

Responsibilities

• Maintain relationships with software engineers, scrum masters, architects, and other security teams to incorporate security principles into the SDLC
• Take part in architecture design reviews
• Conduct vulnerability assessments and software composition analysis on applications within the organization to unveil concealed vulnerabilities in the code
• Collaborate with development teams to remediate vulnerabilities
• Develop and maintain security assessment procedures and guidelines
• Develop security best practices to be used as security standards within Aya
• Stay up to date on emerging threats that affect the security of Aya’s software and applications
• Assist with training of Security Champions, when required

Benefits

• Free premium medical, dental, life and vision insurance
• Generous 401(k) match
• Aya also offers other benefits to those that are eligible and where required by applicable law, including reimbursements and discretionary bonuses
• Aya provides paid sick leave in accordance with all applicable state, federal, and local laws
• Celebrations! We hit our goals and reward ourselves
• Company-sponsored virtual events, happy hours and team-building activities are always on the horizon — plus, you get a special treat on your birthday!
• Unlimited DTO — we believe in time off!
• Virtual yoga, meditation or boot camp classes offered daily