Senior Security Engineer II

Responsibilities

• Design, build, operate, and automate security solutions and services.
• Use security data, trends, and metrics to identify and execute posture improvements with stakeholders.
• Lead incident and issue response, including analysis, containment, mitigation, resolution, and remediation.
• Develop and refine security program policies, standards, baselines, and standard operating procedures.
• Mentor and coach junior engineers and analysts.
• Conduct vulnerability identification, evaluation, and triage using SAST and DAST methodologies and tools.
• Perform code reviews and threat modeling and develop automated security testing and validation systems.
• Implement security controls for web-based SaaS applications, including API security and WAF capabilities.

Requirements

• A BS/BTech or higher in Computer Science, Information Technology, Cybersecurity, or a related field, with 10 years of security-domain experience accepted without a degree.
• At least 6 years of experience securing and deploying applications in cloud-native environments.
• At least 3 years of experience in a dedicated application security role focused on secure SDLC and DevSecOps processes.
• At least 4 years of experience acting as a trusted technical decision-maker in a team setting.
• Experience architecting, developing, and deploying large-scale distributed systems.
• Experience with SAST/DAST, vulnerability triage, code reviews, threat modeling, and automated security testing.
• Proficiency in Python, R, C++, or JavaScript and familiarity with server-side technologies such as Java, Python, Scala, C#, C++, or Go.
• Extensive experience in AWS, Azure, or GCP software development environments.
• Knowledge of healthcare systems such as Electronic Health Records, clinical data, and PHI is preferred.
• Knowledge of AI/LLM and machine learning architectures, OWASP Top 10 vulnerabilities, and web application security controls is preferred.

Benefits

• Remote work within the U.S. or work from the Bethesda, MD headquarters; flexible work schedules are available for many roles.
• Health, dental, and vision insurance paid up to 80% for employees, dependents, and domestic partners.
• 21 days of PTO in the first year, two paid volunteer days, and 11 paid holidays.
• 12 weeks of paid parental leave for all new parents.
• Six weeks of paid sabbatical after six years of service.
• Educational Assistant Program and Clinical Employee Reimbursement Program.
• 401(k) with up to 4% match and stock options.