Senior Application Security Engineer

Senior Application Security Engineer

The Senior Application Security Engineer is responsible for embedding security throughout the software development lifecycle across Dell Medical School's cloud, platform, and enterprise application environments. This role partners with development, infrastructure, cybersecurity, clinical, research, and operational teams to strengthen application security, support secure software delivery, and reduce organizational risk while enabling innovation across academic, research, and healthcare environments.

The Senior Application Security Engineer is responsible for integrating security throughout the software development lifecycle across cloud, platform, and enterprise application environments. This role leads secure code review, application security testing, vulnerability management, cloud security assessments, and secure development initiatives while partnering with development teams to ensure compliance with HIPAA, HITRUST, NIST CSF 2.0, TAC 202, and UTS 165 requirements. The position supports applications developed for academic, research, and clinical environments, including biomedical systems operating within healthcare settings.

Responsibilities include secure development and code review, security testing and vulnerability management, cloud and platform security, AI, robotics, and biomedical systems security, governance, risk, and compliance, and cross-functional collaboration.

Knowledge, skills, and abilities include tech savvy, decision quality, manages complexity, collaborates, action oriented, ensures accountability, and communicates effectively.

Required qualifications include a bachelor's degree in computer science, information security, cybersecurity, software engineering, or a related field; minimum of eight years of experience in application security, secure code review, penetration testing, or secure software development; hands-on experience using Burp Suite, OWASP ZAP, and Metasploit for application security testing and vulnerability validation; experience with static and dynamic application security testing tools; experience securing Microsoft Azure and other cloud environments; experience implementing secure coding practices across common programming languages and web application frameworks; knowledge of secure software development lifecycle methodologies; strong analytical, troubleshooting, and problem-solving skills; excellent verbal and written communication skills; and ability to collaborate effectively with software developers, infrastructure teams, cybersecurity professionals, and business stakeholders.