> Markdown version of [/jobs/ext/2555314-security-risk-application-engineer](https://www.wearedevelopers.com/jobs/ext/2555314-security-risk-application-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Risk Application Engineer - **Company:** HCA Healthcare Inc. - **Location:** Nashville, TN, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Transformation, Microsoft Office, Extensible Markup Language (XML), Extensible Stylesheet Language (XSL) - **Published:** August 2, 2026 - **Apply:** https://www.juju.com/job/00000000gkvyj7 ## About the Role + Bachelor's Degree preferred + Three or more years of relevant work experience Other/Special Qualifications Required: + Effective team management skills + Effective time management skills + Effective organizational skills + Effective written and oral communication skill + Effective analytical skills + Effective decision making in crisis scenarios + Effective project management skills + Creative problem solving + Competent using the Microsoft Office suite of products Desired: + Governance, Risk, Compliance Concepts + Secure Software Development lifecycle + XML/XSL + Working with databases and SQL + Data transformation, migration, and content mapping ## Description The Security GRC Application Engineer functions in the domain of governance, risk management, and compliance (GRC). Applies information security concepts, knowledge, and skills to technology products to support a comprehensive information protection program. Designs and implements solutions to better determine and monitor the current state of security risk across the organization. + Conducts activities to collect and understand business requirements, and propose solutions that will allow business groups to attain automated workflows and business processes + Conducts interviews with company senior management, business owners, and stakeholders to confirm business requirements for GRC solutions. + Leverages an inventory of key applications, processes, and infrastructure items and their impact to enhance risk applications. + Conducts solution designs that provide workflow that provide reasonable assurance that security objectives are being achieved. + Conducts solutions to build technical security reviews and assessments of applications, processes, and technology infrastructure including findings for remediation. + Participate in the creation of thorough solution documentation to facilitate knowledge transfer and the ongoing maintenance of the solution + Conducts solutions to track and measure security risk and ensure compliance with security standards as well as regulatory and audit issues. + Conducts activities to prototype and build risk reports and dashboards for executives, process owners, and/or stakeholders. + Conduct prioritization of development activities, including level of effort estimate, identifying dependencies, and maintain schedule of enhancements. + Support maintenance activities, troubleshooting and resolving production issues, and maintaining content through regular software releases. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Enjoying SQL data pipelines with dbt](https://www.wearedevelopers.com/videos/823-enjoying-sql-data-pipelines-with-dbt) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Building Security Champions](https://www.wearedevelopers.com/videos/193-building-security-champions) - [Modern Data Architectures need Software Engineering](https://www.wearedevelopers.com/videos/1030-modern-data-architectures-need-software-engineering) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)