• Conduct application security reviews — threat modeling, code review, and risk assessment — for new features and major product changes across Monarch's Django/Python stack • Perform and improve SAST/DAST operations including triage, validation, and remediation tracking of findings in CI/CD pipelines • Work through the vulnerability backlog with urgency — maintaining triage criteria, remediation tracking, and escalation paths in partnership with engineering squads • Perform and coordinate penetration testing and security assessments against Monarch's web and API surfaces • Apply and improve AI security review processes for LLM-integrated features and agentic attack surfaces — covering prompt injection, data leakage, model abuse, and supply chain risk • Build and maintain security automations and AI-powered tooling, and define and assess security requirements for AI workflows and agentic systems. • Participate in the weekly security on-call rotation

Role Description The Application Security Engineer will focus on securing applications and systems for the SEC. This position is 100% remote and requires obtaining SEC Public Trust clearance. - Contract Duration: 12+ months - Interview Process: 2x video - Areas of focus: Burp and Veracode Qualifications - 6+ years of Information Technology experience - 3+ years of experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite - 2+ years of experience with Java, Python, .NET, or C# - 3+ years of experience in designing and implementing enterprise-wide security controls - Experience with Eclipse, JDeveloper, or Visual Studio - Experience with securing enterprise web applications and knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS-25 - Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP - Knowledge of Linux or UNIX environments - HS diploma or GED Requirements - Experience with Interactive Application Security Testing (IAST) capabilities and tools - Experience with HackerOne - Experience with Selenium - Experience writing bash scripts - Experience with OWASP ZAP or Burp Proxy Company Description

Role Description As a Advisor Application Developer (Java/.NET/EDI/Pharmacy/NCPDP) at Gainwell, you can contribute your skills as we harness the power of technology to help our clients improve the health and well-being of the members they serve — a community’s most vulnerable. Connect your passion with purpose, teaming with people who thrive on finding innovative solutions to some of healthcare’s biggest challenges. Your role in our mission: - Provides senior-level application analysis, design, development, integration, and support for the healthcare transaction platform and related Medicaid pharmacy systems. - Lead design, development, testing, and deployment of NCPDP F6 transaction processing solutions. - Analyze business and technical requirements and translate them into scalable application designs. - Develop and maintain APIs, interfaces, batch processes, and data integrations. - Perform code reviews and ensure adherence to Gainwell development standards. - Support defect resolution, root-cause analysis, and production issue management. - Collaborate with architects, business analysts, QA teams, and client stakeholders. - Participate in Agile ceremonies and provide technical estimates and work planning. - Create technical documentation, support guides, and knowledge-transfer materials. Qualifications - 8+ years of experience in application development and systems analysis using Java, .NET, APIs, SQL and integration technologies. - Preferred functional areas of expertise in Medicaid, Healthcare Payer and EDI transactions with emphasis on NCPDP. - Experience with NCPDP, National Council for Prescription Drug Programs, is highly desired. - Strong analytical, troubleshooting, and communication skills. Requirements - Fully remote opportunity - All work performed must occur within the continental United States - 48 contiguous states plus Alaska. - Must work during core business hours between 8:00 AM – 5:00 PM Central Time (CST), unless otherwise coordinated. - Provide off-hours support for night and weekend patching, deployments, and incident response. - Perform and support vulnerability remediation efforts in partnership with security teams to ensure compliance with enterprise standards. - Opportunities to travel through your work (0-10%). - Video cameras must be used during all interviews, as well as during the initial week of orientation. Benefits - Generous, flexible vacation policy. - 401(k) employer match. - Comprehensive health benefits. - Educational assistance. - Variety of leadership and technical development academies to help build your skills and capabilities.

Role Description Are you passionate about turning complex technical solutions into customer value and their impact on healthcare? We're seeking an Application Engineer to join our team and play a pivotal role in ensuring our products exceed customer expectations. You will be at the forefront of product performance, collaborating closely with engineering and customer-facing teams to drive continuous improvement. Whether you're new to the field or have some experience, we're looking for someone eager to learn and grow! In this role, a typical day will include: - Collaborating with the team to bring incidents, issues, and requests to resolution - Conducting rigorous product evaluations and testing to identify and address performance bottlenecks - Developing and implementing innovative solutions to improve product functionality and reliability - Providing technical support to internal teams (e.g., sales, customer success) regarding product capabilities - Partnering with the product development team to translate customer needs into actionable product requirements - Creating technical documentation Qualifications - Bachelor's degree and 3+ years of relevant experience (or equivalent) - Experience in hardware and application support - Familiarity with Linux and Windows systems - Familiarity with computer networks (LAN, WAN, WLAN, SDN) - Experience in building and deploying applications - Exceptional problem-solving and analytical skills - Detail-oriented with the ability to manage multiple tasks efficiently - Knowledge of ITSM, ITIL practices - Strong communication and collaboration skills - English language (min. B2) - daily work with global teams Requirements - NICE TO HAVE: - 1+ year of software development experience - Experience in Application Performance Monitoring (APM) Tools - Experience in programming - AWS certification (Solutions Architect/Developer) Benefits - Opportunity to expand knowledge and experience in the field of (indirect) tax - Friendly working environment and a diverse and highly motivated team - Very best working environment for our employees – Alcon Polska has been recognized as a Top Employer for the two years in a row - Truly international environment and daily interactions with colleagues and stakeholders from all over the world - Attractive benefits package (private medical care, group insurance, lunch card, transportation allowance, pension plan, Multisport/cultural card, Alcon products for you and your significant other) - Modern office with a lot of facilities inside located at NewCity building, 15 Marynarska Street, Warsaw