Senior InfoSec Engineer

Medidata is hiring a Senior InfoSec Engineer in Houston, TX (remote) to strengthen application security across the SDLC, including secure release pipeline support and threat-informed engineering practices.

Responsibilities

• Embed secure SDLC practices across the development lifecycle, including SAST/DAST, open-source component management, threat modeling, and architectural security reviews
• Oversee and improve source code control and source code management (SCM) to help enable secure, streamlined release pipelines
• Use core programming and application engineering knowledge to influence secure best-practice architecture and implementation
• Apply working knowledge of web and networking concepts, including Web Services, Service-Oriented/Object-Oriented Architectures, and HTTP, to support robust system communication
• Support modern infrastructure deployment by managing Infrastructure as Code (IaC) and performing Kubernetes Cluster Administration
• Use experience with HTML, JavaScript, and strong HTTP understanding to improve frontend integrations and web security
• Review and improve codebase integrity using hands-on development experience across languages such as .NET (C#), Java, Ruby, Python, JavaScript, TypeScript, AngularJS, and ReactJS
• Implement and maintain data solutions across Relational Databases (MySQL, MS SQL, Oracle) and Non-Relational Databases (MongoDB, DynamoDB, Redis)
• Support and manage Secure AI workflows in SDLC (AI code generation tools such as Copilot and ClaudeCode) and in application features where AI supports customer-facing functionality
• Apply information security principles to proactively identify, mitigate, and defend against malicious code and common hacker techniques and web application vulnerabilities
• Coordinate with other teams to deploy and maintain solutions in an appropriate and cost-effective manner

Requirements

• Bachelor’s degree (or above) in Computer Science/Engineering, Information Technology, or comparable; plus 3-5 years of related experience (required)
• AWS or vendor-agnostic cloud management certification is a plus
• CISSP or equivalent certification is a bonus
• Source code and artifact management: Git, GitHub, Artifactory
• CI/CD pipelines: GitHub Actions
• Scripting languages: Python, TypeScript
• Programming languages: Java, .NET (Java/.NET focus)
• Hosting architectures: Cloud and self-hosted
• Security testing exercises: SAST, DAST

Technologies

• SAST, DAST, open-source components
• Web Services, Service-Oriented Architecture, Object-Oriented Architectures
• HTTP
• Infrastructure as Code (IaC), Kubernetes
• HTML, JavaScript, .NET (C#), Java, Ruby, Python, TypeScript, AngularJS, ReactJS
• MySQL, MS SQL, Oracle, MongoDB, DynamoDB, Redis
• AI code generation tools: Copilot, ClaudeCode
• Git, GitHub, Artifactory, GitHub Actions
• AWS

Benefits

• Medical, dental, life and disability insurance
• 401(k) matching
• Family leave
• Flexible paid time off
• 10 paid holidays per year

Location

• Remote (Houston, TX)
• Medidata follows a hybrid office policy for in-person roles, with on-site days per company policy

About the Team

• The Information Security Application Architecture team designs, evaluates, and enforces application security across all phases of the SDLC
• Works with Engineering, Privacy, and DevOps teams to define and implement application security standards, perform software architecture design reviews, and conduct threat modeling
• Performs white box security testing and supports vulnerability identification, interpretation, and remediation across applications, languages, and platforms
• Reports to the Manager of Application Security & Sourcing

Compensation

• Salary range (NYC Metro Area positions physically based): $114,750-$153,000
• Salary range (all other United States locations): $102,750-$137,000
• Pay ranges are based on function, level, candidate expertise and experience, and geographic location
• Compensation is commensurate with experience; total expected compensation range between $102,750 and $137,000 (base salary plus target bonus)

Equal Employment Opportunity

• Employment decisions based on merit, qualifications, and abilities
• Non-discrimination and equal opportunity without regard to protected characteristics
• Reasonable accommodations for qualified individuals with known disabilities
• Accepting applications on an ongoing basis until the role is filled
• #LI-EM1
• #LI-Hybrid

Inclusion Statement

• Employment and advancement based on merit, qualifications, and abilities
• Non-discrimination and equal opportunity for all employees and qualified applicants
• Reasonable accommodations for qualified individuals with known disabilities
• Qualified applicants with arrest or conviction records considered in accordance with applicable state laws and local ordinances