Application Engineer – Security Remediation (Java/.NET)

About the role

We are seeking a hands‑on Application Engineer to join a dedicated engineering team that supports a security‑remediation program for a leading U.S. healthcare payments and revenue‑cycle software company. The role focuses on fixing application‑security findings in Java and .NET codebases, upgrading vulnerable dependencies, and ensuring secure‑coding standards are met.

Key responsibilities

• Remediate application‑security vulnerabilities in Java and/or .NET (C#) code, covering authentication, authorization, injection, input validation, session management, cryptography, and secrets handling.
• Upgrade vulnerable dependencies and frameworks (e.g., Spring.NET Core) and resolve any breakage introduced by the upgrades.
• Write and adjust tests to validate fixes, prevent regression, and move fixes through the established deployment and change‑control process.
• Capture remediation evidence for audit and compliance review, and triage findings while escalating architectural issues as needed.

Required profile

• 35 years of hands‑on software engineering experience with Java and/or .NET/C#.
• Advanced English proficiency (spoken and written) and solid grasp of application‑security fundamentals (OWASP Top 10, authentication/authorization, session management, cryptography basics, secrets handling).
• Experience remediating findings from SAST/DAST/SCA tools such as Checkmarx, Fortify, Snyk, or Veracode.

Required skills

• Java
• .NET/C#
• Maven / Gradle
• NuGet / MSBuild
• Git (pull‑request workflow)
• OWASP Top 10 knowledge
• SAST tools (Checkmarx, Fortify, Snyk, Veracode)
• Dependency management and framework upgrades (Spring.NET Core)