Security Engineer, Application
for each heading. Use - for any list of duties/requirements/benefits, and
for prose.
We must preserve all substantive information, remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Also remove "Position Title: Security Engineer, Application" maybe not needed as heading. Also "This role is not eligible for sponsorship." maybe minor metadata; we can fold into a short
or drop it. "Position location: Richmond, Va., Lynchburg, Va. A Hybrid schedule..." schedule info we need to include in Schedule section if present. It says: "A Hybrid schedule of both Remote and In-Office days is required. In office days are Tuesday, Wednesday and Thursday with working hours targeting our core business hours of 9am-5pm EST." That's schedule info, so we should create a Schedule section with that content.
Pay: "National Range: $77,800 - $117,000" plus disclaimer about actual compensation varies, plus bonus incentive plan. That's pay info, so we create Pay section.
Benefits: there is a big list under "Employee Benefits & Well-Being" etc. So Benefits section.
About the role: maybe the introductory paragraph about Genworth/CareScout mission etc. That's about the company and role context. Could be "About the role" or "About the company". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to decide which sections have content.
We have responsibilities: "What you will be doing:" bullet list. That's responsibilities.
We have requirements/qualifications: "What you bring:" list of qualifications, plus maybe "As an ideal candidate you will have 3+ years of experience..." That's qualifications.
Skills: maybe we can extract skills from qualifications; but we could also have a Skills section separate if there is specific skill list. The qualifications list includes many skills; we could put them under Requirements or Qualifications. The instruction says prefer a few substantive sections over many thin ones. So we could combine Requirements and Qualifications into one section? But headings are predefined; we can still include both if they have content. However we should avoid thin sections. The qualifications list is substantive; we could put under "Requirements". The "What you bring:" includes degree, experience, etc. That's qualifications. Could also be "Skills". But we can decide to have Requirements and Qualifications both, but maybe they'd be similar. Better to have one section "Requirements" that includes both experience and skills. Or we could have "Qualifications" for degree/experience and "Skills" for technical skills. Let's see content: "What you bring:" includes Computer Science or similar degree, Experience using vulnerability scanning..., Formal experience with threat modeling, Experience leading projects..., Deep knowledge of Assessing and prioritization..., Cloud experience (AWS, Azure, GCP), Infrastructure as Code (IaC) and Policy as Code (PaC) Concepts, Experience implementing secure SDLC programs, Familiarity with technical security controls..., Ability to automate tasks..., Scripting or programming experience (list), Experience with penetration testing..., Experience assessing software compliance with HIPAA, PHI, PII and PCI. That's a mix of qualifications and skills. Could split: Qualifications: degree, years of experience, leading projects, etc. Skills: technical skills list. But we have also "As an ideal candidate you will have 3+ years of experience in a Security Engineering role with proven experience in Application Security, DevSecOps, and experience securing applications in cloud environments." That's experience.
Thus we can have:
- About the role: introductory paragraph about Genworth/CareScout mission and values (maybe also the four values). That's substantive.
- Responsibilities: the "What you will be doing:" list.
- Requirements: maybe combine experience and degree etc. Or we could have Qualifications for degree/experience and Skills for technical list. Let's do two sections: Qualifications and Skills.
- Benefits: the benefits list.
- Pay: the salary range and bonus.
- Schedule: hybrid schedule details.
We must not include headings with filler text. All these sections have real content.
We must not repeat job title as heading. Not include Job ID/requisition numbers.
We must remove boilerplate: The disclaimer about national range, bonus incentive plan, etc we keep in Pay section. The "Additional Information" heading we can ignore; we just incorporate the content.
We must not include application instructions (none present). Remove EEO etc (not present). Remove duplicated lines.
Now craft HTML.
We'll start with
About the role
then containing the mission paragraph: "At Genworth/CareScout, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care—and we bring those experiences with us to work in serving our millions of policyholders each day. We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism. Our four values guide our strategy, our decisions, and our interactions: Make it human. We care about the people that make up our customers, colleagues, and communities. Make it about others. We do what’s best for our customers and collaborate to drive progress. Make it happen. We work with intention toward a common purpose and forge ways forward together. Make it better. We create fulfilling purpose-driven careers by learning from the world and each other."
That's the about.
Next Responsibilities:
Responsibilities
then - each bullet from "What you will be doing:" list.
List items:
- Assist with the operation and maintenance of application vulnerability scanning tools, Application Security Testing (AST) platforms, and cloud security technologies.
- Partner with development teams and business stakeholders to help identify application security vulnerabilities and support remediation efforts under the guidance of senior team members.
- Support security investigations and remediation activities related to application and information security issues.
- Assist in the administration, monitoring, and day-to-day operation of security technologies and automation platforms.
- Participate in security assessments, threat identification activities, basic threat modeling exercises, and risk reduction initiatives.
- Help generate reports and dashboards that provide visibility into application security findings and overall security posture.
- Contribute to the collection and tracking of security metrics, Key Risk Indicators (KRIs), and security scorecards.
- Serve as a point of contact for routine application security inquiries and assist with vulnerability triage, CI/CD security reviews, and remediation tracking.
- Participate in the evaluation and implementation of security tools, processes, and technologies designed to strengthen the organization's security posture.
- Support compliance and governance activities by assisting with security reviews, documentation, and continuous process improvements.
- Learn and apply secure coding principles, industry security standards, and organizational security requirements throughout the software development lifecycle.
- Collaborate with senior Application Security Engineers to gain experience in application security testing, cloud security, and DevSecOps practices.
That's all.
Next Qualifications: maybe include degree, years experience, leading projects, etc. Let's extract from "What you bring:" and the earlier ideal candidate statement.
Qualifications content:
- Computer Science or similar degree
- 3+ years of experience in a Security Engineering role with proven experience in Application Security, DevSecOps, and experience securing applications in cloud environments.
- Experience leading projects, initiatives, and resources through direct and indirect leadership.
- (maybe also) Experience assessing software compliance with HIPAA, PHI, PII and PCI (but that's more skill). We'll keep that under Skills.
We'll also include maybe "Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling." but that's skill.
Thus Qualifications: degree, years experience, leading projects.
We'll put as
.
Next Skills: technical skills list.
List:
- Experience using vulnerability scanning technologies, Application Security Testing (AST) platforms, and cloud security tooling.
- Formal experience with threat modeling.
- Deep knowledge of assessing and prioritization of risk with an ability to think like a bad actor and use that context to conduct threat models.
- Cloud experience (AWS, Azure, GCP)
- Infrastructure as Code (IaC) and Policy as Code (PaC) concepts.
- Experience implementing secure Software Development Lifecycle programs.
- Familiarity with technical security controls, guidelines, and frameworks outlined by standards such as SOC2, ISO 27001, NIST 800-53.
- Ability to automate tasks and code solutions to repetitive problems.
- Scripting or programming experience (Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash)
- Experience with penetration testing and web application assessment.
- Experience assessing software compliance with HIPAA, PHI, PII and PCI.
We'll put as .
Next Benefits: list from "Employee Benefits & Well-Being" etc.
We need to capture all benefits items:
- Competitive Compensation & Total Rewards
- Incentives
- Comprehensive Healthcare Coverage
- Multiple 401(k) Savings Plan Options
- Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)
- Generous Paid Time Off – Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave
- Disability, Life, and Long Term Care Insurance
- Tuition Reimbursement, Student Loan Repayment and Training & Certification Support
- Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
- Caregiver and Mental Health Support Services
Also earlier: "Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives." That's prose; we can include as before list.
Thus Benefits section:
Benefits
Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives.
then with each benefit.
Next Pay: Pay
National Range: $77,800 - $117,000. Disclaimer: This role is aligned to a national market-based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job-related factors. In addition to base salary, this role is eligible to participate in a bonus incentive plan. Incentive compensation is based on individual and company performance and is not guaranteed.
Next Schedule: Schedule
A Hybrid schedule of both Remote and In-Office days is required. In office days are Tuesday, Wednesday and Thursday with working hours targeting our core business hours of 9am-5pm EST.
We should also include position location? Could be part of About the role or maybe a short paragraph. The location: "Position location: Richmond, Va., Lynchburg, Va." Could be included in About the role or a separate short paragraph. Since we have no specific heading for location, we could incorporate into About the role paragraph after mission. Or we could add a short under About
for prose. We must preserve all substantive information, remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. Also remove "Position Title: Security Engineer, Application" maybe not needed as heading. Also "This role is not eligible for sponsorship." maybe minor metadata; we can fold into a short
or drop it. "Position location: Richmond, Va., Lynchburg, Va. A Hybrid schedule..." schedule info we need to include in Schedule section if present. It says: "A Hybrid schedule of both Remote and In-Office days is required. In office days are Tuesday, Wednesday and Thursday with working hours targeting our core business hours of 9am-5pm EST." That's schedule info, so we should create a Schedule section with that content. Pay: "National Range: $77,800 - $117,000" plus disclaimer about actual compensation varies, plus bonus incentive plan. That's pay info, so we create Pay section. Benefits: there is a big list under "Employee Benefits & Well-Being" etc. So Benefits section. About the role: maybe the introductory paragraph about Genworth/CareScout mission etc. That's about the company and role context. Could be "About the role" or "About the company". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to decide which sections have content. We have responsibilities: "What you will be doing:" bullet list. That's responsibilities. We have requirements/qualifications: "What you bring:" list of qualifications, plus maybe "As an ideal candidate you will have 3+ years of experience..." That's qualifications. Skills: maybe we can extract skills from qualifications; but we could also have a Skills section separate if there is specific skill list. The qualifications list includes many skills; we could put them under Requirements or Qualifications. The instruction says prefer a few substantive sections over many thin ones. So we could combine Requirements and Qualifications into one section? But headings are predefined; we can still include both if they have content. However we should avoid thin sections. The qualifications list is substantive; we could put under "Requirements". The "What you bring:" includes degree, experience, etc. That's qualifications. Could also be "Skills". But we can decide to have Requirements and Qualifications both, but maybe they'd be similar. Better to have one section "Requirements" that includes both experience and skills. Or we could have "Qualifications" for degree/experience and "Skills" for technical skills. Let's see content: "What you bring:" includes Computer Science or similar degree, Experience using vulnerability scanning..., Formal experience with threat modeling, Experience leading projects..., Deep knowledge of Assessing and prioritization..., Cloud experience (AWS, Azure, GCP), Infrastructure as Code (IaC) and Policy as Code (PaC) Concepts, Experience implementing secure SDLC programs, Familiarity with technical security controls..., Ability to automate tasks..., Scripting or programming experience (list), Experience with penetration testing..., Experience assessing software compliance with HIPAA, PHI, PII and PCI. That's a mix of qualifications and skills. Could split: Qualifications: degree, years of experience, leading projects, etc. Skills: technical skills list. But we have also "As an ideal candidate you will have 3+ years of experience in a Security Engineering role with proven experience in Application Security, DevSecOps, and experience securing applications in cloud environments." That's experience. Thus we can have: - About the role: introductory paragraph about Genworth/CareScout mission and values (maybe also the four values). That's substantive. - Responsibilities: the "What you will be doing:" list. - Requirements: maybe combine experience and degree etc. Or we could have Qualifications for degree/experience and Skills for technical list. Let's do two sections: Qualifications and Skills. - Benefits: the benefits list. - Pay: the salary range and bonus. - Schedule: hybrid schedule details. We must not include headings with filler text. All these sections have real content. We must not repeat job title as heading. Not include Job ID/requisition numbers. We must remove boilerplate: The disclaimer about national range, bonus incentive plan, etc we keep in Pay section. The "Additional Information" heading we can ignore; we just incorporate the content. We must not include application instructions (none present). Remove EEO etc (not present). Remove duplicated lines. Now craft HTML. We'll start with
About the role
thencontaining the mission paragraph: "At Genworth/CareScout, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care—and we bring those experiences with us to work in serving our millions of policyholders each day. We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism. Our four values guide our strategy, our decisions, and our interactions: Make it human. We care about the people that make up our customers, colleagues, and communities. Make it about others. We do what’s best for our customers and collaborate to drive progress. Make it happen. We work with intention toward a common purpose and forge ways forward together. Make it better. We create fulfilling purpose-driven careers by learning from the world and each other." That's the about. Next Responsibilities:
Responsibilities
then- each bullet from "What you will be doing:" list.
List items:
- Assist with the operation and maintenance of application vulnerability scanning tools, Application Security Testing (AST) platforms, and cloud security technologies.
- Partner with development teams and business stakeholders to help identify application security vulnerabilities and support remediation efforts under the guidance of senior team members.
- Support security investigations and remediation activities related to application and information security issues.
- Assist in the administration, monitoring, and day-to-day operation of security technologies and automation platforms.
- Participate in security assessments, threat identification activities, basic threat modeling exercises, and risk reduction initiatives.
- Help generate reports and dashboards that provide visibility into application security findings and overall security posture.
- Contribute to the collection and tracking of security metrics, Key Risk Indicators (KRIs), and security scorecards.
- Serve as a point of contact for routine application security inquiries and assist with vulnerability triage, CI/CD security reviews, and remediation tracking.
- Participate in the evaluation and implementation of security tools, processes, and technologies designed to strengthen the organization's security posture.
- Support compliance and governance activities by assisting with security reviews, documentation, and continuous process improvements.
- Learn and apply secure coding principles, industry security standards, and organizational security requirements throughout the software development lifecycle.
- Collaborate with senior Application Security Engineers to gain experience in application security testing, cloud security, and DevSecOps practices.
That's all.
Next Qualifications: maybe include degree, years experience, leading projects, etc. Let's extract from "What you bring:" and the earlier ideal candidate statement.
Qualifications content:
- Computer Science or similar degree
- 3+ years of experience in a Security Engineering role with proven experience in Application Security, DevSecOps, and experience securing applications in cloud environments.
- Experience leading projects, initiatives, and resources through direct and indirect leadership.
- (maybe also) Experience assessing software compliance with HIPAA, PHI, PII and PCI (but that's more skill). We'll keep that under Skills.
We'll also include maybe "Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling." but that's skill.
Thus Qualifications: degree, years experience, leading projects.
We'll put as
- .
Next Skills: technical skills list.
List:
- Experience using vulnerability scanning technologies, Application Security Testing (AST) platforms, and cloud security tooling.
- Formal experience with threat modeling.
- Deep knowledge of assessing and prioritization of risk with an ability to think like a bad actor and use that context to conduct threat models.
- Cloud experience (AWS, Azure, GCP)
- Infrastructure as Code (IaC) and Policy as Code (PaC) concepts.
- Experience implementing secure Software Development Lifecycle programs.
- Familiarity with technical security controls, guidelines, and frameworks outlined by standards such as SOC2, ISO 27001, NIST 800-53.
- Ability to automate tasks and code solutions to repetitive problems.
- Scripting or programming experience (Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash)
- Experience with penetration testing and web application assessment.
- Experience assessing software compliance with HIPAA, PHI, PII and PCI.
We'll put as
- .
Next Benefits: list from "Employee Benefits & Well-Being" etc.
We need to capture all benefits items:
- Competitive Compensation & Total Rewards
- Incentives
- Comprehensive Healthcare Coverage
- Multiple 401(k) Savings Plan Options
- Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)
- Generous Paid Time Off – Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave
- Disability, Life, and Long Term Care Insurance
- Tuition Reimbursement, Student Loan Repayment and Training & Certification Support
- Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
- Caregiver and Mental Health Support Services
Also earlier: "Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives." That's prose; we can include as
before list. Thus Benefits section:
Benefits
Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives.
then- with each benefit.
Next Pay:
Pay
National Range: $77,800 - $117,000. Disclaimer: This role is aligned to a national market-based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job-related factors. In addition to base salary, this role is eligible to participate in a bonus incentive plan. Incentive compensation is based on individual and company performance and is not guaranteed.
Next Schedule:Schedule
A Hybrid schedule of both Remote and In-Office days is required. In office days are Tuesday, Wednesday and Thursday with working hours targeting our core business hours of 9am-5pm EST.
We should also include position location? Could be part of About the role or maybe a short paragraph. The location: "Position location: Richmond, Va., Lynchburg, Va." Could be included in About the role or a separate short paragraph. Since we have no specific heading for location, we could incorporate into About the role paragraph after mission. Or we could add a shortunder About