Application Security Strategist

Role: Application Security Strategist responsible for defining, implementing, and promoting secure application design standards within Labcorp's technology environment. Primary objectives include developing reusable security patterns for modern architectures (web, API, microservices), guiding secure design practices, and collaborating with cross-functional teams to embed security throughout the software development lifecycle. Responsibilities encompass creating reference implementations, advising on secure integration and data protection, and supporting risk mitigation initiatives. The role also involves staying current with emerging security threats, improving security frameworks, and enabling secure development in cloud-native environments. Qualifications: minimum 8 years in application security and software development, with expertise in secure coding (OWASP Top 10), designing or securing web/APIs/microservices, and working with enterprise security frameworks (NIST, CIS Controls). Cloud security experience (AWS/Azure), and proficiency with authentication protocols (OAuth 2.0, OIDC, SAML) are required. Preferred skills include defining secure SDLC practices, API security, threat modeling, security testing tools, and AI-enabled application security. Certifications such as CSSLP, GWAPT, or CISSP are advantageous. Stakeholders: engineering, architecture, cybersecurity, and compliance teams. Work setup: remote with hybrid options near NC locations; standard business hours, with occasional flexibility. Travel is not specified.