Sr Application Security Engineer
Henry Schein
Summary
This position is responsible for focusing on the implementation and maintenance of the application security program across research, development, quality assurance, support, and IT systems. This is a high level, conceptual, as well as hands-on position that requires a great deal of general security experience, as well as application development experience and secure coding knowledge.
Job description
What You Will Do
- Advise and participate in the design of secure products and architectures
- Perform architecture security reviews, security focused code reviews, and security testing
- Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture
- Monitor software usage and perform forensics to verify that the software is performing to the required security standards
- Perform constant monitoring and awareness of key developments in web and client application security to provide direction of security trends, and anticipate emerging standards and best practices
- Communicate to senior management by demonstrating a moderate skill in presenting technical concepts
- Attend all meetings necessary for the seamless delivery of the product as part of the Software Development Life Cycle
- Leverage AI/ML tools to enhance security testing, threat modeling, and code review workflows
What We Are Looking For
- 5+ years of relevant Information Security and/or Software Engineering experience
- Familiarity with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration) and experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
- Knowledge of secure application programming, coding lifecycles, and design, including the ability to implement code derived from technical specifications
- Solid understanding of security principles, best practices, architectures, tools, and processes, along with working knowledge of multiple current operating systems and hosting environments
- Knowledge of software and network architecture, standards, and authentication protocol building blocks and methods
- Ability to conduct threat assessments, assess risk, and build risk-based security processes that work within various development methodologies
- Ability to communicate security objectives to a variety of audiences
- Working knowledge of reverse engineering techniques and tools
- Solid knowledge of data storage formats, tools, and languages, and familiarity with the variety of programming languages leveraged in the products being secured
What Will Set You Apart
- Bachelor's Degree in Computer Science or Information Security
- One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP
Requirements
- 5+ years of relevant Information Security and/or Software Engineering experience
- Familiarity with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration)
- Experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
- Knowledge of secure application programming, coding lifecycles, and design
- Ability to implement code derived from technical specifications
- Solid understanding of security principles, best practices, architectures, tools, and processes
- Working knowledge of multiple current operating systems and hosting environments
- Knowledge of software and network architecture, standards, and authentication protocol building blocks and methods
- Ability to conduct threat assessments, assess risk, and build risk-based security processes
- Ability to communicate security objectives to a variety of audiences
- Working knowledge of reverse engineering techniques and tools
- Solid knowledge of data storage formats, tools, and languages
- Familiarity with a variety of programming languages leveraged in the products being secured
- Authorized to work in the United States without employer sponsorship
- Bachelor's Degree in Computer Science or Information Security
- Industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT, OSED, and/or OSCP
Benefits
- Medical, Dental & Vision
- 401(k) Matching
- Paid Time Off
- Paid Parental Leave
- Short Term Disability
- Work Life Assistance Program
- Health Savings Account
- Flexible Spending Account
- Education Benefits
- Worldwide Scholarship Program
- Volunteer Opportunities
Company overview
Henry Schein, Inc. is a leading global healthcare solutions company that serves as the world's largest provider of healthcare products and services to office-based dental and medical practitioners. Founded in 1932 and headquartered in Melville, New York, the company operates as a Fortune 500 corporation and S&P 500 component with extensive operations across 33 countries and territories. Henry Schein specializes in distributing dental and medical supplies, equipment, pharmaceuticals, and technology solutions to more than 1 million customers worldwide. The company offers comprehensive business, clinical, technology, and supply chain solutions designed to help healthcare professionals improve operational efficiency and clinical outcomes. With a centralized and automated distribution network featuring over 300,000 branded products, Henry Schein has established itself as a trusted advisor in the healthcare industry, consistently recognized as one of the World's Most Ethical Companies for 14 consecutive years. The company's revenue reached $12.7 billion in 2024, demonstrating sustained growth since its public listing in 1995.