Note: The job is a remote job and is open to candidates in USA. Henry Schein One is a global leader in dental practice management technology focused on enhancing patient care and supporting dental practices. The Sr Application Security Engineer will implement and maintain the application security program across research, development, quality assurance, support, and IT systems. The role includes secure architecture and code reviews, security testing, threat assessment, application security monitoring, and leveraging AI/ML tools to improve security workflows.
Responsibilities
- Advise and participate in the design of secure products and architectures
- Perform architecture security reviews, security focused code reviews, and security testing
- Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture
- Monitor software usage and perform forensics to verify that the software is performing to the required security standards
- Perform constant monitoring and awareness of key developments in web and client application security to provide direction of security trends, and anticipate emerging standards and best practices
- Communicate to senior management by demonstrating a moderate skill in presenting technical concepts
- Attend all meetings necessary for the seamless delivery of the product as part of the Software Development Life Cycle
- Leverage AI/ML tools to enhance security testing, threat modeling, and code review workflows
Skills
- * 5+ years of relevant Information Security and/or Software Engineering experience
- * Familiarity with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration) and experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
- * Knowledge of secure application programming, coding lifecycles, and design, including the ability to implement code derived from technical specifications
- * Solid understanding of security principles, best practices, architectures, tools, and processes, along with working knowledge of multiple current operating systems and hosting environments
- * Knowledge of software and network architecture, standards, and authentication protocol building blocks and methods
- * Ability to conduct threat assessments, assess risk, and build risk-based security processes that work within various development methodologies
- * Ability to communicate security objectives to a variety of audiences
- * Working knowledge of reverse engineering techniques and tools
- * Solid knowledge of data storage formats, tools, and languages, and familiarity with the variety of programming languages leveraged in the products being secured
- *This position is remote within the United States with up to 10% travel as needed.*
- * Bachelor's Degree in Computer Science or Information Security
- * One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP
Benefits
- A robust benefits package including health coverage, retirement savings with company match, paid time off, parental leave, wellbeing resources, education support, and MORE!
- This position is eligible for a bonus target not reflected in the range.
Company Overview
Company H1B Sponsorship