City/State

Virginia Beach, VA

Work Shift

First (Days)

Overview:

Sentara Health is seeking an Application Cyber Security Engineer to join our Cybersecurity   team!

This is a Full- Time Remote position

As an Application Cyber Security Engineer, you will be responsible for ensuring the security and integrity of Sentara’s software applications. You will play a vital role in identifying vulnerabilities, implementing secure coding practices, and conducting thorough security assessments. Your experience in application security and knowledge of industry standards will help protect critical applications from cyber threats and ensure the confidentiality, integrity, and availability of sensitive data.

          An Experienced Professional applies practical knowledge of job areas typically obtained through advanced education and work experience. Responsibilities typically include: • Works independently with general supervision. • Problems faced are difficult but typically not complex. • May influence others within the job area through explanation of facts, policies, and practices.

Education

• Bachelor's Degree Preferred

• Experience in lieu of Bachelor’s Degree

  3 years of relevant experience with a degree 

  5+ years of relevant experience without a degree  

Certification/Licensure

• Certified Application Security Engineer (CASE) / GIAC Security Essentials (GSEC): / CompTIA Security+ would be a plus

Experience

• Proven experience (2 years) in application security, with a strong understanding of application vulnerabilities and secure coding practices.

• Familiarity with web application security concepts, technologies, and frameworks (e.g., HTTP, SSL/TLS, OWASP, etc.).
• Experience with security testing tools and methodologies, such as SAST, DAST, or secure code review tools.
• Proficiency in programming languages commonly used in application development, such as Java, .NET, Python, or JavaScript.
• Strong analytical and problem-solving skills, with the ability to effectively assess and communicate application security risks.
• Excellent written and verbal communication skills, with the ability to collaborate with cross-functional teams and explain complex security concepts to non-technical stakeholders.
• Knowledge of application security controls: Secure coding practices, Authentication and Authorization, Input Validation, Encryption, Logging and Auditing, Vulnerability Management, Penetration Testing, Secure Software Development Lifecycle (SDLC), Access Control, Patch Management, Artificial Intelligence (AI) and Machine Learning (ML).
• Knowledge of various technical frameworks and concepts (MITRE ATT&CK, CIS, Kill Chain, etc)
• Experience working in a highly regulated environment.
• Ability to express complex technical concepts in business terms.
• Organized and detail-oriented, able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently.
• Evaluate effectiveness of the internal security control framework and recommend adjustments as business needs change.
• Regularly interact with all levels of management to present and discuss control effectiveness.
• Review and coordinate changes to cyber security policies, procedures, and standards.

Keywords : #zipRecruiter, #LI-AR2 ; Talroo, Application Engineer, OWSAP

.

We provide market-competitive compensation packages, inclusive of base pay, incentives, benefits, and equity. The base pay rate for Full Time employment is:$80,204.80-$133,681.60

Benefits: Caring For Your Family and Your Career• Medical, Dental, Vision plans• Adoption, Fertility and Surrogacy Reimbursement up to $10,000• Paid Time Off and Sick Leave• Paid Parental & Family Caregiver Leave • Emergency Backup Care• Long-Term, Short-Term Disability, and Critical Illness plans• Life Insurance• 401k/403B with Employer Match• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education• Student Debt Pay Down – $10,000• Reimbursement for certifications and free access to complete CEUs and profe