Software Technologist - Security Engineer

Job Title

Software Technologist - Security Engineer

Job Description

Minimum required Education:
Bachelor's Degree in Computer Science, Software Engineering, Information Technology OR Vocational Education in Information Technology or equivalent.

Minimum required Experience:

We are looking for a highly skilled Application Security Engineer with strong software engineering experience in Java and/or C#/.NET, who can drive security throughout the software development lifecycle.

The ideal candidate will combine deep application security expertise with hands-on development experience to design, build, review, and secure modern cloud-native applications, APIs, and microservices.

This role requires collaboration with engineering, architecture, DevOps, cloud, and product teams to embed security controls, identify vulnerabilities, and ensure secure-by-design solutions across enterprise platforms.

Job title:
Software Technologist - Security Engineer

Your role:

• Design and implement authentication, authorization, and identity management solutions.
• Remediate vulnerabilities and reduce application security risk.
• Evaluate and recommend security technologies, frameworks, and architectural patterns.

You're the right fit if:

Experience

• 5–8 years of experience in software engineering, application development, or application security.
• Minimum 3+ years of hands-on experience implementing secure coding practices and application security controls.
• Proven experience working with enterprise-scale applications and distributed systems.

Secure Software Development

• Strong expertise in secure software development using:
  • Java, Spring Boot, Spring Security
  • C#, ASP.NET Core, .NET Framework/.NET Core
• Deep understanding of:
  • Security-by-Design principles
  • Secure coding standards
• Experience performing:
  • Secure code reviews/ design reviews
  • Threat modeling exercises
  • Vulnerability risk assessments
• Knowledge of common software vulnerabilities including:
  • SQL Injection/XSS/CSRF/RCE
  • Broken Authentication & Authorization

Application Security

• Strong experience implementing:
  • OAuth2
  • OpenID Connect (OIDC)
  • JWT
  • SAML
  • Multi-Factor Authentication (MFA)
• Experience securing:
  • REST APIs
  • gRPC services
• Strong understanding of:
  • Identity and Access Management (IAM)
  • Role-Based Access Control (RBAC)
  • Secrets Management
  • Data Protection and Encryption

Security Testing & Vulnerability Management

• Experience with security testing tools and processes:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
  • Container Security Scanning
• Familiarity with tools such as:
  • SonarQube
  • GHAS
  • Burp Suite
• Experience triaging and remediating vulnerabilities identified through:
  • Penetration Testing
  • Security Assessments
  • Bug Bounty programs
  • Automated Security Scans

Cloud & DevSecOps

• Hands-on experience with:
  • Microsoft Azure and/or AWS
• Knowledge of cloud security services:
  • Azure Key Vault / AWS Secrets Manager
  • AWS IAM
• Experience integrating security controls within CI/CD pipelines:
  • GitHub Actions
• Experience with:
  • Docker
  • Kubernetes

Database & Data Security

• Experience implementing:
  • Database security controls
  • Encryption at rest and in transit
  • Data masking
  • Secure data access patterns
• Understanding of privacy and regulatory requirements related to sensitive data.

How we work together
We believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week.
Onsite roles require full-time presence in the company’s facilities.
Field roles are most effectively done outside of the company’s main facilities, generally at the customers’ or suppliers’ locations.
Indicate if this role is an office/field/onsite role.

About Philips
We are a health technology company. We built our entire company around the belief that every human matters, and we won't stop until everybody everywhere has access to the quality healthcare that we all deserve. Do the work of your life to help the lives of others.
• Learn more about our business.
• Discover our rich and exciting history.
• Learn more about our purpose.
If you’re interested in this role and have many, but not all, of the experiences needed, we encourage you to apply. You may still be the right candidate for this or other opportunities at Philips. Learn more about our culture of impact with care here.

#LI-EU
#LI-Hybrid
#ConnectedCare