Note: The job is a remote job and is open to candidates in USA. Henry Schein One is hiring a Senior Application Security Engineer to implement and maintain its application security program across research, development, quality assurance, support, and IT systems. The role advises on secure product and architecture design, conducts security reviews and testing, partners with engineering and product teams, and monitors security practices and emerging trends.

Responsibilities

• Advise and participate in the design of secure products and architectures
• Perform architecture security reviews, security focused code reviews, and security testing
• Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture
• Monitor software usage and perform forensics to verify that the software is performing to the required security standards
• Perform constant monitoring and awareness of key developments in web and client application security to provide direction of security trends, and anticipate emerging standards and best practices
• Communicate to senior management by demonstrating a moderate skill in presenting technical concepts
• Attend all meetings necessary for the seamless delivery of the product as part of the Software Development Life Cycle
• Leverage AI/ML tools to enhance security testing, threat modeling, and code review workflows

Skills

• This is a high level, conceptual, as well as hands-on position that requires a great deal of general security experience, as well as application development experience and secure coding knowledge
• This position is not eligible for employment-based visa sponsorship. To be considered, candidates must be authorized to work in the United States for Henry Schein One without the need for current or future employer sponsorship
• 5+ years of relevant Information Security and/or Software Engineering experience
• Familiarity with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration) and experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
• Knowledge of secure application programming, coding lifecycles, and design, including the ability to implement code derived from technical specifications
• Solid understanding of security principles, best practices, architectures, tools, and processes, along with working knowledge of multiple current operating systems and hosting environments
• Knowledge of software and network architecture, standards, and authentication protocol building blocks and methods
• Ability to conduct threat assessments, assess risk, and build risk-based security processes that work within various development methodologies
• Ability to communicate security objectives to a variety of audiences
• Working knowledge of reverse engineering techniques and tools
• Solid knowledge of data storage formats, tools, and languages, and familiarity with the variety of programming languages leveraged in the products being secured
• Bachelor's Degree in Computer Science or Information Security
• One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP

Benefits

• Eligible for a bonus target not reflected in the range.
• Health coverage
• Retirement savings with company match
• Paid time off
• Parental leave
• Wellbeing resources
• Education support
• Remote position within the United States

Company Overview