Application Security Engineer I

Ensemble RCM LLC is hiring an Application Security Engineer I for its Cybersecurity Technical Assessments team. This entry-level role is designed to support skill growth while contributing to application security reviews, vulnerability verification, and safer software delivery. You will work with an application security tool stack and help strengthen secure SDLC practices, including CI/CD integration, with some automation.

Why you will like this role

You get a structured path to develop practical application security expertise. The team uses SAST, DAST, and SCA as part of ongoing assessments, with mentorship and hands-on learning through code reviews, secure design reviews, and documented findings. Ensemble RCM LLC also offers a comprehensive benefits package, a professional certification opportunity, and tuition reimbursement to support long-term development.

• Comprehensive benefits including healthcare, time off, retirement, and well-being programs
• Professional certification relevant to your field
• Tuition reimbursement
• Incentive programs available quarterly and annually

What you will do

As an Application Security Engineer I, you will support secure application testing and risk remediation efforts under supervision. Your work will help confirm vulnerability signals, document results, and keep security findings organized for development teams.

• Assist in analyzing source code for secure coding practices
• Use SAST, DAST, and SCA tools to identify vulnerabilities under supervision
• Help verify tool results and document findings
• Log and track security issues in ticketing systems
• Support secure SDLC practices and CI/CD integration
• Collaborate with developers and operations on basic automation tasks
• Participate in secure code and design reviews as a learner
• Generate basic reports and summaries of findings
• Contribute to security awareness and training efforts

What you bring

• Foundational understanding of security tools and vulnerabilities, with basic scripting or programming knowledge
• Familiarity with network, application, and system security vulnerabilities
• Proficiency in scripting and programming languages relevant to security tasks
• Ability to follow procedures and analyze basic security issues with attention to detail
• Clear written and verbal communication, including willingness to explain technical issues
• Ability to convey security issues to non-technical stakeholders
• Comfort working in team settings, with openness to feedback and mentorship
• Ability to work effectively with a remotely located team spanning multiple time zones
• Curiosity and commitment to developing cybersecurity skills
• Openness to innovation, including AI, to explore process improvements and reduce friction while improving patient and client experiences

Location, travel, and eligibility

This is a remote position based in Blue Ash, OH. Candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require. Applicants must reside in the United States and be authorized to work in the United States.

Compensation

$84,000 to $126,000 per year based on experience.

Technologies: SAST, DAST, SCA, CI/CD