Application Security Engineer

Location: Albany, NY • Security clearance: not required • Job type: Full-time

About the role

Deliver simple solutions to complex problems as an Application Security Engineer. Your work will immerse you in our client’s domain to address their complex needs. You’ll join our team in partnership with New York State of Health (NYSoH) to provide comprehensive health coverage to more than 7.2 million New Yorkers through its Health Benefit Exchange (HBE).

Responsibilities

• Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in the SDLC.
• Perform risk-based, technical assessments and penetration tests of applications using dynamic and static scanning tools, and audits ensuring compliance with industry standards.
• Consult with Development leadership on application development training.
• Research new attack vectors and stay current with cybersecurity news and trends.
• Design and execute a repeatable process to aggressively prioritize issue dispositions and remediations of security findings while providing clear, concise status updates and risk reporting to leadership and stakeholders.
• Integrate AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
• Assess new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.

Requirements

• Bachelor’s degree in Computer Science or related technical field, or equivalent combination of education and experience.
• 8+ years in Information Technology.
• 3+ years in Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic/automated code review, dynamic and static application scanning (Fortify, SonarQube), consulting on security designs of applications, potential vulnerabilities, remediation, and creating training materials on key security concepts.
• Java/Web development with strong secure coding background in RHEL and JBoss.
• 5+ years in a software development role as a Developer or Architect.

Skills

• Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues and management.
• Critical thinking and creative problem solving.
• Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.
• Strong analytical skills.
• Demonstrated collaboration and teaching abilities.

Preferred Qualifications

• CISSP, CEH, CISA, OSCP, OSCE, or OSWE certifications.

Pay

$90,000–110,000 target salary range, depending on education level, years of experience, certifications, and other position-specific requirements.