Application Cyber Security Engineer

City/State

Virginia Beach, VA

Overview

Work Shift

First (Days) (United States of America)

Sentara Health is seeking an Application Cyber Security Engineer to join our Cybersecurity   team!

This position is 100% Remote -Candidates must have a current residence in one of the follow states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine Maryland, Minnesota, Nebraska, Nevada, North Carolina, New Hampshire, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington (state), West Virginia, Wisconsin, Wyoming !

Job Description Summary:

               As an Application Cyber Security Engineer, you will be responsible for ensuring the security and integrity of Sentara’s software applications. You will play a vital role in identifying vulnerabilities, implementing secure coding practices, and conducting thorough security assessments. Your experience in application security and knowledge of industry standards will help protect critical applications from cyber threats and ensure the confidentiality, integrity, and availability of sensitive data.

          An Experienced Professional applies practical knowledge of job areas typically obtained through advanced education and work experience. Responsibilities typically include: • Works independently with general supervision. • Problems faced are difficult but typically not complex. • May influence others within the job area through explanation of facts, policies, and practices.

Experience in lieu of Bachelor’s Degree

3 years of relevant experience with a degree 

5+ years of relevant experience without a degree  

Primary Responsibilities:

Application Security Assessments:

· Conduct comprehensive security assessments of software applications, including static and dynamic code analysis, vulnerability scanning, and penetration testing.

· Identify and prioritize application vulnerabilities, security weaknesses, and coding flaws, and provide recommendations for remediation.

· Collaborate with development teams to integrate security testing tools and methodologies into the software development lifecycle.

Secure Coding Practices:

· Promote and enforce secure coding practices among developers, ensuring adherence to industry standards and best practices.

· Provide guidance and training to development teams on secure coding principles, secure design patterns, and secure development methodologies.

· Review application source code to identify potential security vulnerabilities and recommend necessary code changes.

Vulnerability Management:

· Manage and track vulnerabilities identified in applications, coordinate with development teams to prioritize and address them in a timely manner.

· Stay updated with the latest security vulnerabilities and threats, and actively monitor vulnerability databases and security advisories.

· Implement vulnerability management processes to ensure effective tracking, remediation, and mitigation of identified vulnerabilities.

Security Architecture and Design:

· Collaborate with architects and development teams to integrate security into the application architecture and design phases.

· Review application design documents, identify security gaps, and propose appropriate security controls and countermeasures.

· Assist in the selection and implementation of security technologies, tools, and frameworks to enhance application security.

Incident Response and Threat Management:

· Participate in incident response activities related to application security incidents, collaborating with incident response teams to investigate and mitigate threats.

· Develop incident response plans specific to application security incidents and conduct post-incident analysis to improve security practices.

· Monitor and analyze application logs and security events to detect and respond to potential security incidents and anomalies.

Office 365 Security Controls:

· Managing Identity and Access by overseeing user identities and access controls, synchronizing identities, setting up single sign-on, and enforcing multi-factor authentication to ensure secure access.

· Threat Protection by establishing and managing