Application Security Engineer

For more than 20 years, PointClickCare has been the backbone of senior care. We’ve amassed the richest senior care dataset making our market density untouchable and our connections to the healthcare ecosystem exponentially more powerful than those of any other platform. 
With Collective Medical & Audacious Inquiry, we’ve become the most expansive, full-continuum care collaboration network, offering care teams immediate, point-of-care access to deep, real-time insights at every stage of a patient’s journey.
For more information on PointClickCare, please connect with us on Glassdoor and LinkedIn.

As an Engineer for the Application Security department, you will play a critical role in safeguarding our company's applications and platforms.  AppSec Engineers have distinct areas of responsibility where you will be the AppSec contact for designated teams, remediate security issues, help teams to understand and correct vulnerabilities, provide training, and build libraries.  Your primary responsibility will be to triage the various scan results on a daily basis.  This role requires a strategic thinker who can understand and address security concerns on a company-wide scale.

Key Responsibility

• Daily Management of Security Tools: Oversee and triage findings from SAST, DAST, and SCA tools to identify and prioritize security vulnerabilities.
• Develop and Maintain Security Libraries: Build and maintain libraries and frameworks to support the security infrastructure of the company. Ensure these resources are up-to-date and effective in mitigating security risks.
• Code Correction: Where possible, fix vulnerabilities detected.
• Collaboration and Communication: Work closely with various teams within the Engineering department and other departments to ensure seamless integration of security practices. Communicate effectively with stakeholders about potential security risks and mitigation strategies.
• Security Policy and Compliance: Contribute to the development and enforcement of security policies and procedures. Ensure compliance with industry standards and regulations.
• Incident Response: Participate in incident response activities, including investigation and remediation of security incidents or vulnerabilities.
• Continuous Learning and Improvement: Stay abreast of the latest developments in application security. Continuously improve our security practices through research, training, and implementation of innovative security solutions mediation of security incidents or vulnerabilities.

Qualification and Skills

• Bachelor’s degree in computer science, Information Security, or a related field.
• Strong understanding of SAST, DAST, and SCA tools and practices.
• Experience in developing and maintaining libraries and frameworks.
• Experience in developing and maintaining security libraries and frameworks.
• Excellent problem-solving skills and the ability to think strategically.
• Familiarity with industry standards and security compliance requirements.
• Strong communication and collaboration skills.

It is the policy of PointClickCare to ensure equal employment opportunity without discrimination or harassment on the basis of race, religion, national origin, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law. PointClickCare welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. Please contact recruitment@pointclickcare.com should you require any accommodations.
When you apply for a position, your information is processed and stored with Lever, in accordance with Lever’s Privacy Policy. We use this information to evaluate your candidacy for the posted position. We also store this information, and may use it in relation to future positions to which you apply, or which we believe may be relevant to you given your background. When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it.  If you have any questions about how PointClickCare uses or processes your information, or if you would like to ask to access, correct, or delete your information, please contact PointClickCare’s human resources team: recruitment@pointclickcare.com 
PointClickCare is committed to Information Security. By applying to this position, if hired, you