Applications Security Engineer II

Position Purpose: Application Security Engineer II applies cybersecurity and privacy principles to ensure the organization's applications and services are implemented according to internal security standards. Recognizes vulnerabilities in security systems (e.g., vulnerability and compliance scanning). Oversees and performs threat modeling, security code reviews, security assessments, security hardening reviews, evaluates security designs, etc. throughout the Secure Software Development Life Cycle (SSDLC) process. Engineers and develops cloud automation routines to streamline operations. Promotes understanding and adherence to the SSDLC Policy and Standards and Application Security Testing tools (SAST, DAST, IAST & MAST).

Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT.

Ensures the implementation and maintenance of application security standards as per industry best practices.

Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement.

Assists with the auditing of application security and operational configurations.

Proactively monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc.

Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties.

Continually automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards.

Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process.

Undertakes initiatives/policies to review and generate recommendations for the application security configuration.

Performs other duties as assigned.

Complies with all policies and standards.

Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and requires 2 – 4 years of related experience.

Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills

Experience with administration, configuration, and implementation of SaaS systems/software in the healthcare domain.

Knowledge of .NET Framework; C++; Java; Python (Programming Language).

Knowledge of Development toolset to design, develop, test, deploy, maintain, and improve software.

Experience with Static and dynamic application scanning tools.

Soft Skills

Intermediate - Seeks to acquire knowledge in area of specialty.

Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions.

Intermediate - Ability to work independently.

License/Certification

Security+, CISSP, CISM, CIAM, or AWS/Azure Security Specialist preferred.

Pay Range: $75,300.00 - $135,400.00 per year

At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday.