Senior Security Engineer

To support a growing healthcare initiative, the remote Senior Security Engineer will identify and remediate security vulnerabilities in Java-based applications, design security controls for APIs, and integrate security tooling across CI/CD pipelines while ensuring compliance with industry standards. Key responsibilities Identify, assess, and remediate security vulnerabilities in Java applications and protect ecommerce platforms against various threats Design and enforce security controls for REST and GraphQL APIs, implementing strong authentication and authorization strategies Integrate and manage security tooling across CI/CD pipelines, ensuring secure coding standards and infrastructure-as-code security Required qualifications 5+ years of experience in Security Engineering, DevSecOps, or DevOps roles Strong hands-on experience securing Java-based web applications, particularly with Spring Boot and microservices Deep understanding of OWASP Top 10 and ecommerce attack patterns Proven experience securing applications in AWS cloud environments Hands-on experience with CI/CD security tooling, including SAST, SCA, and DAST solutions