ABOUT THIS POSITION

The Security Application Engineer contributes to our security team by helping drive and implement application security strategy, innovation, design, and process improvement. This application security subject-matter expert will partner with and provide guidance for other application development teams to further improve our overall security posture.

WHAT YOU'LL DO

• Contribute to the security architecture by helping to integrate security into the design and development processes, performing application security reviews, code reviews, and threat modeling

• Develop and oversee secure code analysis program in conjunction with the development teams

• Review of full suite of internal, commercial, and open-source applications for vulnerability management

• Research and analyze application behaviors and improving security and stability

• Work to ensure that security solutions achieve a balance of performance, security, and compatibility

• Provide tier 3 engineering support to troubleshoot complex problems

• Assess and provide feedback on new security sensitive functionality and application infrastructure

• Review implementation code of critical projects

• Collaborate with colleagues across a variety of teams to architect & ship projects securely

WHAT YOU'LL NEED

• Has thorough knowledge and experience with SDLC

• Proficient with testing and code scanning software

• Proficient with identifying security issues in applications through code review

• Proficiency with vulnerability assessment tools, code scanning tools (Snyk), and penetration testing tools like Metasploit, Burp Suite, and Kali Linux.

• Knowledge of cloud security best practices and healthcare data privacy regulations (HIPAA, etc.) or related industries.

• Familiarity with security frameworks and standards such as OWASP, NIST, and ISO 27001

• Understanding of cloud security practices and tools for platforms like AWS, Azure, or Google Cloud.

• Proficiency in scripting languages such as Python, PowerShell, or Bash for automating vulnerability assessments and remediation tasks.

• Well versed in operating systems such as Linux as well as Windows environments, Active Directory, VPN systems, encryption schemas and algorithms, various authorization and authentication mechanisms/software, network monitoring and sniffing, TCP/IP networks and vulnerability and threat management tools (including network-based scanners).

• Strong analytical and problem-solving skills with the ability to assess and prioritize vulnerabilities

• Possesses strong communications skills, both written and oral

• Be willing to collaborate with other teams in a positive manner

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, related field or equivalent work experience

Preferred Skills:

• At least 2 years of experience coding web applications

• At least 2 years of experience performing manual penetration test

• At least 1 years of experience performing risk assessments, secure network architecture, and vulnerability management

• Experience working in the healthcare industry and knowledge of regulatory/compliance systems

• Experience working as part of an Incident Response team

• Experience in conducting training sessions with developers

• Experience in purple teaming exercises

• Cyber certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or GIAC Penetration Tester (GPEN), CISSP, or related training

ABOUT WAYSTAR

Through a smart platform and better experience, Waystar helps providers simplify healthcare payments and yield powerful results throughout the complete revenue cycle.

Waystar’s healthcare payments platform combines innovative, cloud-based technology, robust data, and unparalleled client support to streamline workflows and improve financials so providers can focus on what matters most: their patients and communities. Waystar is trusted by 1M+ providers, 1K+ hospitals and health systems, and is connected to over 5K commercial and Medicaid/Medicare payers. We are deeply committed to living out our organizational values: honesty; kindness; passion; curiosity; fanatical focus; best work, always; making it happen; and joyful, optimistic & fun.

Waystar products have won multiple Best in KLAS® or Category Leader awards since 2010 and earned multiple #1 rankings from Black Book™ surveys since 2012. The Waystar platform supports more than 500,000 providers, 1,000 health systems and hospitals, and 5,000 payers and health plans. For more information, visit waystar.com or follow @Waystar (https://twitter.com/Waystar) on Twitter.

WAYSTAR PERKS

• Competitive total rewards (base salary + bonus, if applicable)

• Customizable benefits package (3 medical plans with Health Saving Account company match)

• Generous paid time off starting at 3 weeks + 13 paid holidays including 2 personal floating holidays

• Paid parental leave (including maternity + paternity leave)

• Education assistance opportunities and free LinkedIn Learning access

• Free mental health and family planning programs, including adoption assistance and fertility support

• 401(K) program with company match

• Pet insurance

• Employee resource groups

Waystar is proud to be an equal opportunity workplace. We celebrate, value, and support diversity and inclusion. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, marital status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Job Category: Technology/Engineering

Job Type: Full time

Req ID: R2203