Sr Application Security Engineer

Henry Schein One is a global dental technology company focused on advancing dental practice management and patient care. The Sr Application Security Engineer will implement and maintain the application security program, advise on secure product architecture, conduct security reviews and testing, collaborate with engineering and product teams, and leverage AI/ML tools in security workflows.

Responsibilities:

• Advise and participate in the design of secure products and architectures
• Perform architecture security reviews, security focused code reviews, and security testing
• Work closely with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as necessary, and verification of threat models, risk and security posture
• Monitor software usage and perform forensics to verify that the software is performing to the required security standards
• Perform constant monitoring and awareness of key developments in web and client application security to provide direction of security trends, and anticipate emerging standards and best practices
• Communicate to senior management by demonstrating a moderate skill in presenting technical concepts
• Attend all meetings necessary for the seamless delivery of the product as part of the Software Development Life Cycle
• Leverage AI/ML tools to enhance security testing, threat modeling, and code review workflows

Requirements:

• 5+ years of relevant Information Security and/or Software Engineering experience
• Familiarity with AI/LLM-specific security risks (e.g., OWASP Top 10 for LLM Applications, prompt injection, model poisoning, data exfiltration) and experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices
• Knowledge of secure application programming, coding lifecycles, and design, including the ability to implement code derived from technical specifications
• Solid understanding of security principles, best practices, architectures, tools, and processes, along with working knowledge of multiple current operating systems and hosting environments
• Knowledge of software and network architecture, standards, and authentication protocol building blocks and methods
• Ability to conduct threat assessments, assess risk, and build risk-based security processes that work within various development methodologies
• Ability to communicate security objectives to a variety of audiences
• Working knowledge of reverse engineering techniques and tools
• Solid knowledge of data storage formats, tools, and languages, and familiarity with the variety of programming languages leveraged in the products being secured
• This position is remote within the United States with up to 10% travel as needed
• Bachelor's Degree in Computer Science or Information Security
• One or more industry relevant certification: CISSP, CEH, PNPT, OSWE, GWAPT OSED, and/or OSCP