[Hiring] Staff Application Security Engineer @Henry Schein One

Role Description

This position is responsible for focusing on the strategy, development, implementation, and maintenance of the application security program across research, development, quality assurance, support, and IT systems. This is a high level, conceptual, as well as hands-on position that requires a great deal of general security experience, as well as application development experience and secure coding knowledge. This position is remote within the United States with up to 10% travel as needed.

What You Will Do

• Advise and participate in the design of secure products and architectures
• Perform architecture security reviews, security focused code reviews, and security testing
• Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture
• Monitor software usage and perform forensics to verify that the software is performing to the required security standards
• Perform constant monitoring and awareness of key developments in web and client application security to provide direction of security trends, and anticipate emerging standards and best practices
• Provide leadership, guidance and direction to security resources and be an influencer of development, systems, support, and quality assurance teams
• Communicate to senior management by demonstrating a moderate skill in presenting technical concepts
• Attend all meetings necessary for the seamless delivery of the product as part of the Software Development Life Cycle
• Evaluate and help govern the secure use of AI-assisted development tools (e.g., AI code generation, Copilot-style assistants) across engineering teams
• Leverage AI/ML tools to enhance security testing, threat modeling, and code review workflows
• Mentor more junior security engineers by leading and influencing technical decisions, processes, and best practices with a moderate ability to explain technical concepts in written and verbal forms

Qualifications

• 8+ years of relevant Information Security and/or Software Engineering experience
• Fluency with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration) and experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
• Excellent knowledge of secure application programming, coding life cycles and design
• Excellent understanding of security principles, best practices architectures, tools, and processes
• Advanced knowledge of multiple current operating systems and hosting environments
• Excellent knowledge of software and network architecture and standards
• Excellent knowledge of authentication protocol building blocks and methods
• Excellent ability to conduct threat assessments and assess risk
• Excellent ability to create and maintain risk-based measures and build security processes that work within various development methodologies
• Excellent ability to communicate security objectives to a variety of audiences
• Excellent knowledge of reverse engineering techniques and tools
• Excellent ability to implement code derived from technical specifications
• Advanced knowledge of data storage formats, tools and languages
• Knowledge of a variety of programming languages leveraged in the products being secured

Requirements

• Bachelor’s Degree in Computer Science or Information Security
• One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP

Benefits

• A robust benefits package including health coverage
• Retirement savings with company match
• Paid time off
• Parental leave
• Wellbeing resources
• Education support
• AND MORE!