> Markdown version of [/jobs/ext/3873088-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3873088-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Application Security Engineer

- **Company:** SUPERLANET INC
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Salary:** $125,000 - $150,000
- **Contract:** Permanent contract
- **Skills:** Adobe Marketing Cloud, Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Application Testing, Automation of Tests, Microsoft Azure, Burp Suite, Hospital Information Systems, Software as a Service, Cloud Computing, Cyber Security, Github, Identity and Access Management, Machine Learning, Network Segmentation, Open Web Application Security, Systems Development Life Cycle, Secure Coding, Security Software, Software Engineering, SonarQube, Web Applications, Software Security, Veracode, Generative AI, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Metasploit, Checkmarx, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 22, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-application-security-engineer-austin-tx--fbb5ef78-d041-4a15-bc30-5c609fa2a661

## About the Role

Applications Security, Software Engineering, Applications Security, Healthcare, Software Engineering, Clinical Information Systems, Cloud Computing, Software Development Lifecycle (SDLC), Security Software, Clinical Research, * Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.

 * Approximately 5+ years of directly relevant, hands-on application security experience, with a strong focus on application security, secure code review, or penetration testing rather than general cybersecurity alone.
 * Hands-on experience with Burp Suite, OWASP ZAP, and Metasploit.
 * Strong understanding of OWASP Top 10, CWE Top 25, secure coding principles, and common web application vulnerabilities.
 * Experience performing manual and automated secure code reviews.
 * Experience with web application and API penetration testing, vulnerability validation, and remediation.
 * Experience establishing or improving SSDLC practices.
 * Working knowledge of SAST, DAST, and SCA technologies such as Checkmarx, Veracode, SonarQube, or similar platforms.
 * Experience integrating security testing into CI/CD pipelines.
 * Cloud application security experience, particularly within Microsoft Azure. Senior Application Security Eng…
 * Strong technical troubleshooting, documentation, risk assessment, and cross-functional communication skills., * Experience within healthcare, an academic medical center, higher education, or another highly regulated environment.
 * Familiarity with HIPAA, HITRUST, NIST CSF 2.0, and related security frameworks.
 * Experience with Azure DevOps, GitHub, Adobe Experience Cloud, or comparable enterprise development platforms.
 * Experience with threat modeling, security architecture reviews, and secure software supply-chain practices.
 * Familiarity with AI/ML security, generative AI security, biomedical systems, connected medical devices, robotics, or automation security. Senior Application Security Eng…
 * Experience with QA/test automation and incorporating security assessments into automated testing processes.

## Description

The engineer will be responsible for secure code reviews, application vulnerability assessments, penetration testing, and security testing while partnering directly with development teams to identify and remediate vulnerabilities. The role will also establish secure development standards and strengthen application security processes as the organization expands its technology environment and prepares for future hospital operations., * Develop, implement, and mature Secure Software Development Lifecycle (SSDLC) standards and application security practices.

 * Perform manual and automated secure code reviews, identifying vulnerabilities including OWASP Top 10 and CWE Top 25 risks.
 * Conduct web application and API security assessments, vulnerability scanning, and penetration testing.
 * Utilize Burp Suite, OWASP ZAP, and Metasploit for application testing, vulnerability validation, and controlled exploitation.
 * Integrate SAST, DAST, and Software Composition Analysis (SCA) capabilities into CI/CD pipelines.
 * Partner directly with developers to remediate vulnerabilities and provide secure coding guidance.
 * Assess application security within Microsoft Azure, including identity and access management, network segmentation, and resource-level controls. Senior Application Security Eng…
 * Evaluate API security, including authentication, authorization, and data-validation controls.
 * Conduct threat modeling and security architecture reviews for new applications and integrations.
 * Support security assessments involving AI/ML applications, generative AI, automation, biomedical systems, and connected medical technologies.
 * Maintain application security documentation, standards, procedures, and risk-based vulnerability tracking.
 * Communicate technical vulnerabilities and business risk effectively to both technical teams and leadership. Senior Application Security Eng…