Senior Applications Security Engineer

Posted:
7/21/2024, 5:00:00 PM

Location(s):
Emilia-Romagna, Italy

Experience Level(s):
Senior

Field(s):
DevOps & Infrastructure ⋅ IT & Security ⋅ Software Engineering

Workplace Type:
Hybrid

You could be the one who changes everything for our 28 million members by using technology to improve health outcomes around the world.  As a diversified, national organization, Centene's technology professionals have access to competitive benefits including a fresh perspective on workplace flexibility.
 

Position Purpose:

Applies cybersecurity and privacy principles to ensure the organization's applications and services are implemented according to internal security standards. Recognizes vulnerabilities in security systems (e.g., vulnerability and compliance scanning). Oversees and performs threat modeling, security code reviews, security assessments, security hardening reviews, evaluates security designs, etc. throughout the Secure Software Development Life Cycle (SSDLC) process. Engineers and develops cloud automation routines to streamline operations. Promotes understanding and adherence to the SSDLC Policy and Standards.

  • Work directly with application development teams to ensure application weaknesses and identified vulnerabilities are mitigated or remediated based on SLA.
  • Review and improve existing plans, policies, and procedures for the response and recovery from incidents.
  • Champion understanding and adherence to the secure SDLC policy and standard.
  • Oversee development of training on procedures around application security testing (AST) platform operations and outage response.
  • Respond to security incidents, technical incident support bridges, and other medium to high severity issues. Provide escalation support.
  • Support knowledge transfer and education for Tier 1 and Tier 2 Applications Security Engineers.
  • Serve as a liaison between other IT Security teams and development teams.
  • Performs other duties as assigned.
  • Complies with all policies and standards.

Education/Experience:

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science).
Requires 4 – 6 years of related experience.

Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills:

  • One or more of the following skills are desired:
  • Intermediate knowledge of programming and/or scripting languages including, but not limited to C#, Java, Go, JavaScript, Bash, and PowerShell.
  • Understanding of DevOps workflows.
  • Intermediate understanding of Confidentiality, Integrity, & Reliability (CIA) triad application to application security concepts.
  • Standard Operating Procedure development.
  • Intermediate understanding of Agile operations.
  • Intermediate understanding of Site Reliability Engineering.
  • Intermediate experience administrating and using application security testing (AST) platforms such as Snyk, Veracode, Netsparker, AppScan, NowSecure, Contrast, etc.
  • Intermediate experience administrating and using API security platforms such as Traceable.ai, Salt, Noname Security, etc.
  • Intermediate experience with administrating containerized applications running within Kubernetes.
  • Intermediate experience with administrating applications and/or security tools running within AWS.


Soft Skills:

  • Intermediate - Seeks to acquire knowledge in area of specialty
  • Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
  • Intermediate - Ability to work independently
  • Intermediate - Demonstrated analytical skills
  • Intermediate - Demonstrated project management skills
  • Intermediate - Demonstrates a high level of accuracy, even under pressure
  • Intermediate - Demonstrates excellent judgment and decision making skills

Pay Range: $83,600.00 - $155,000.00 per year

Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules.  Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law.  Total compensation may also include additional forms of incentives.

Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law.