Application Security Engineer

Role Description

Who We Are

At UST HealthProof, you will join a fast-paced, growing company in our mission to reshape the future of health insurance by significantly reducing administrative costs and building better healthcare experiences for our health plan customers and their members. By creating a modern, cloud-based, Best-In-Class core administration ecosystem, we have made healthcare more affordable and helped our health plans operate more efficiently. Through member and provider touchpoints with less friction, we have created a real impact for members.

UST HealthProof is run by leaders with strong health plans and technology backgrounds a startup mindset and an environment of support where individual growth is nurtured. You will be supporting our proven core admin solutions and business process-as-a-service (BPaaS) operations to provide transparency, improve operational efficiency, break down operational barriers to scale, and drive strategic growth.

Visit us at

You Are

An Application Security Engineer who will be responsible for upholding a secure SDLC, working closely with cross-functional teams to configure dynamic analysis and spearhead the implementation of remediation strategies. You will collaborate with various teams including software development, DevOps, QA, Scrum, product management, release engineering, release management, and Veracode.

The Opportunity

Collaborate with various teams including software development, DevOps, QA, Scrum, product management, release engineering, release management, and Veracode.

• Work closely with development teams that build software to support the UST HealthProof products.
• Drive engineering teams to evolve toward a DevSecOps model, building security automation wherever possible.
• Maintain Ci/CD integrated application security solutions.
• Provide application security support to development teams, including reviewing and explaining application security tools and processes, providing vulnerability explanations and remediation guidance.
• Coordinate application security metrics reporting.
• Coordinate annual application security training and mentoring of security champions.

You Will Need

A Bachelor’s degree in Computer Science, Information Technology, or a related field or the equivalent. Continuous learning, as defined by the Company’s learning philosophy. Certification or progress toward certification is highly preferred and encouraged. Hands on experience in application security and software development Experience building, deploying, and maturing CI/CD integrated application security tools. Solid understanding of web-based application technologies and web services/API Ability to read and understand code at a high-level across most common languages C#, Java, C++, Python, JavaScript and NodeJS Experience with application security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) Functional understanding in tooling integrations that support agile, CI/CD, and DevSecOps methodologies. Experience working cross-functionally with various teams. This will be critical to success in this role. Team player who is delivery-oriented and takes responsibility for the team’s success. Enthusiastic, can-do attitude with the drive to continually learn and improve. Highly self-motivated, creative and able to dive deep in problem solving.

Bonus Points If You Have

A CSSLP certification and ISC2 certification preferred. Familiarity with AppSec tools such as Veracode, JFrog, X-Ray, JFrog Artifactory, SonarQube, SonarCloud and SonarLint.

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience.  As required by local law, UST provides a reasonable range of compensation for roles that may be hired in California, Colorado, New York City, or Washington as set forth below.

Role Location: Remote

Compensation Range: $111,000 to $167,000.

What We Believe

We’re proud to embrace the same values that have shaped UST since the beginning. Since day one, we’ve been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone, to champion diversity and inclusion, and to place people at the center of everything we do.

Humility

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity

Through business, we will better the lives of those less fortunate than ourselves.

Integrity

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

Skills

Bash Scripts,C + +,Application Security