Simplify Logo
LabCorp

LabCorp

Global life sciences R&D services

Application Security Strategist

Full-TimeDeadline 9/30/26
$160k - $170k/yr
Senior, Expert
Remote in USA+2 more

More locations: Durham, NC, USA | Burlington, NC, USA

Hybrid

Applicants within 35 miles of Burlington or Durham must work at least three days per week in the office.

No H1B Sponsorship

About the job

Requirements
  • At least 8 years of combined experience across application security and software development, focused on translating application-layer risks into secure design standards and actionable guidance.
  • At least 5 years of experience applying secure coding principles, including the OWASP Top 10, and designing or securing web applications, application programming interfaces, and microservices architectures.
  • At least 3 years of experience with enterprise security frameworks including the NIST Cybersecurity Framework, CIS Controls, and ISO 27001; secure design patterns; and consultative cross-functional work.
  • At least 3 years of hands-on application or software development experience, or equivalent demonstrated experience enabling credible engagement with developers on secure coding practices and design decisions.
  • At least 2 years of experience securing cloud-native applications in Amazon Web Services or Microsoft Azure and working with OAuth 2.0, OpenID Connect, and Security Assertion Markup Language.
  • Experience supporting security testing or assessment teams.
  • Familiarity with identity and access management platforms such as Okta, Microsoft Entra ID, or SailPoint.
  • Broad familiarity with cloud platform security capabilities and their integration into enterprise environments.
  • Relevant certifications such as CSSLP, GWAPT, or CISSP.
  • Ability to simplify complex technical concepts for diverse audiences.
  • Ability to deliver practical, scalable, and reusable solutions.
Responsibilities
  • Define and document secure development standards and patterns for modern web, application programming interface, and microservices architectures using industry best practices such as OWASP and broader frameworks such as NIST and CIS Controls.
  • Develop reusable patterns for secure application programming interfaces, service-to-service communication, and front-end/back-end architecture.
  • Develop reference implementations, code samples, and starter templates demonstrating secure design patterns and accelerating adoption across development teams.
  • Translate complex security risks into clear, developer-focused guidance.
  • Contribute to machine-consumable security patterns for artificial intelligence-enabled and automated development tools.
  • Collaborate with engineers and architects during design discussions on secure application architecture and design decisions.
  • Identify common security pitfalls early in the software development lifecycle.
  • Provide guidance on secure integration and data protection patterns, including input validation and output encoding, application programming interface security and authentication flows, session management and token handling, and secrets management and secure configuration.
  • Promote secure-by-design and secure-by-default principles.
  • Support integration of authentication and authorization patterns within application architectures.
  • Coach development teams on secure implementation of OAuth 2.0, OpenID Connect, and Security Assertion Markup Language.
  • Guide alignment of application security practices with identity and access management, identity governance, and privileged access management solutions.
  • Partner with Digital Identity Services, Cybersecurity Engineering, Product Security Testing, Governance, Risk, and Compliance, Cybersecurity Operations, and Enterprise Architecture teams on application security guidance and risk mitigation.
  • Support data protection initiatives by advising teams on controls for sensitive data handling and exposure mitigation.
  • Review vulnerability patterns and provide guidance on prioritizing and remediating application security risks.
  • Serve as a trusted advisor to engineering and architecture teams by providing practical security recommendations.
  • Lead standardization of application security risk management practices across teams.
  • Stay current with emerging threats, vulnerabilities, and application security trends.
  • Evaluate and evolve security standards for cloud-native, API-first, distributed, and artificial-intelligence-enabled applications.
  • Contribute to scalable and consistent application security enablement practices across the organization.
Desired Qualifications
  • At least 3 years of experience defining secure development standards, reference architectures, or integrating security into the software development lifecycle, including DevSecOps practices and continuous integration/continuous delivery workflows.
  • At least 2 years of experience with application programming interface security frameworks and tooling for modern API-driven architectures.
  • At least 2 years of experience applying threat-modeling methodologies to identify design-level risks and guide mitigation strategies with engineering and architecture teams.
  • At least 2 years of experience with application security testing tools, including static application security testing, dynamic application security testing, and software composition analysis, including interpreting findings and helping teams prioritize and remediate them.
  • At least 1 year of experience enabling secure design of artificial-intelligence-enabled applications, including emerging risks and secure design patterns.
  • Strong analytical and problem-solving skills with a pragmatic approach to security solutions.
  • A developer-focused mindset with an understanding of modern application development practices.
  • Strong collaboration skills across engineering, security, and architecture teams.
  • Professionalism, adaptability, and a continuous-learning mindset.
  • Strong communication skills for translating complex security concepts into practical guidance.

About the company

Labcorp provides end-to-end R&D services for life sciences and agricultural clients, including crop protection, with testing and regulatory support. It runs physicochemical analyses, safety assessments, and inhalation toxicology studies using specialized labs to evaluate inhaled substances. It differentiates itself with a global footprint and an integrated set of services across the product lifecycle, including regulatory submissions. Its goal is to help clients bring safe, effective products to market efficiently by applying rigorous science and scalable testing.

Company Size

10,001+

Company Stage

IPO

Headquarters

Burlington, Vermont

Founded

1976

Get referred to LabCorp

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Investor Day on September 10, 2026 guided 5% to 8% revenue CAGR through 2029.
  • Labcorp launched a hepatitis D reflex test on August 25, 2026, broadening specialty diagnostics.
  • The OHSU MRD bladder cancer study on September 9, 2026 strengthens oncology companion revenue.

What critics are saying

  • The September 4, 2026 website-tracking settlement restricts Meta Pixel and Google Analytics for two years.
  • Labcorp faces post-settlement compliance reporting, senior oversight, and litigation headlines through 2028.
  • A major data or compliance scandal would erode trust with sponsors and hospitals.

What makes LabCorp unique

  • Labcorp spans diagnostics and biopharma labs, supporting 85% of FDA-approved new drugs in 2025.
  • MLM acquisition on September 8, 2026 created wholly owned central labs across four continents.
  • Global Trial Connect upgrades on August 31, 2026 deepen sponsor workflows and visibility.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) Retirement Plan

Unlimited Paid Time Off

Tuition Reimbursement

Employee Stock Purchase Plan

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

0%
Business Wire
Sep 12th, 2026
Evvy, Precision Women’s Health Startup focused on the Vaginal Microbiome, Announces $14M Series A

Evvy, a female-founded startup unlocking precision women’s healthcare through biomarker discovery, announced today the closing of a $14 million Series A fund...

PR Newswire
Sep 10th, 2026
Labcorp targets 5-8% annual revenue growth through 2029 at investor day

Labcorp hosted its 2026 Investor Day on 10 September, outlining its growth strategy and long-term financial outlook through 2029. The company expects compound annual revenue growth of 5% to 8% and adjusted earnings per share growth of 8.5% to 11.5% through 2029. Chairman and CEO Adam Schechter said Labcorp is positioned at the intersection of diagnostics, biopharma, science and technology. The company reaffirmed its 2026 guidance, projecting enterprise revenue growth of 5.4% to 6.3%. Labcorp's Diagnostics Laboratories division is expected to grow 5.3% to 6.0%, whilst Biopharma Laboratory Services is forecast to grow 5.5% to 6.5%. Chief Financial Officer Julia Wang cited the company's proven delivery record and disciplined value creation framework as underpinning this outlook. The company employs nearly 71,000 people and serves clients in approximately 100 countries.

PR Newswire
Sep 8th, 2026
Labcorp acquires MLM Medical Labs to become only central laboratory provider with wholly owned network across four continents

Labcorp has acquired MLM Medical Labs, a global central and specialty laboratory provider with operations in the United States, Germany and South Africa. Financial terms were not disclosed. The acquisition establishes Labcorp as the only central laboratory provider with a wholly owned laboratory network across four continents: North America, Europe, Asia and Africa. MLM operates Africa's first fully CAP-accredited central laboratory. The deal expands Labcorp's presence in key clinical research regions and strengthens its biomarker and specialty testing capabilities. It enhances the company's ability to support multinational clinical trials with consistent scientific, operational and regulatory oversight. Labcorp employs nearly 71,000 people serving clients in approximately 100 countries.

BioPharma Watch
Sep 8th, 2026
Labcorp acquires MLM Medical Labs, expanding global central laboratory and biomarker capabilities for clinical trials.

Labcorp acquires MLM Medical Labs, expanding global central laboratory and biomarker capabilities for clinical trials. Key Takeaway: Labcorp has acquired MLM Medical Labs, enhancing its global laboratory services and biomarker capabilities. This acquisition positions Labcorp as the only central laboratory provider with a wholly owned network across four continents. It aims to support complex clinical trials with improved scientific and operational oversight, particularly in emerging markets like Africa. Market sentiment analysis. Positive FACTORS. * Acquisition enhances Labcorp's global laboratory network. * Strengthens biomarker and specialty testing capabilities. * Supports complex multinational clinical trials. * Establishes Labcorp as a leader in central laboratory services. Acquisition establishes Labcorp as the only central laboratory provider with a wholly owned laboratory network across four continents BURLINGTON, N.C., Sept. 8, 2026 /PRNewswire/ - Labcorp (NYSE: LH), a global leader of innovative and comprehensive laboratory services, today announced the acquisition of MLM Medical Labs (MLM), a leading global central and specialty laboratory provider with operations across the United States, Germany and South Africa. Financial terms of the transaction were not disclosed. The acquisition enhances Labcorp's position as a leading independent central laboratory services provider by expanding its presence in key clinical research regions and strengthening its biomarker and specialty testing capabilities. The transaction expands Labcorp's laboratory footprint and establishes Labcorp as the only central laboratory provider with a wholly owned laboratory network across four continents: North America, Europe, Asia and Africa. The combination brings together Labcorp's global scale, breadth of scientific capabilities and operational infrastructure with MLM's established laboratory network and science-led service model. "Clinical trial sponsors today need scientific expertise, global reach and operational flexibility to advance increasingly complex development programs," said Brian Caveney, M.D., EVP and president, biopharma laboratory services and chief medical and scientific officer, Labcorp. "MLM complements Labcorp's existing strengths and enhances our ability to support sponsors of all sizes, from emerging biotechs to leading pharmaceutical companies. Together, we are well positioned to provide the capabilities, regional expertise and high-touch support sponsors need to advance innovative therapies worldwide." This integrated global infrastructure enhances Labcorp's ability to support complex multinational clinical trials with consistent scientific, operational and regulatory oversight from a single trusted partner. The acquisition also expands Labcorp's laboratory footprint in critical clinical research markets, including Africa, where MLM operates the continent's first fully CAP-accredited central laboratory. In addition, the acquisition strengthens Labcorp's scientific and regulatory expertise and broadens access to biomarker and specialty testing capabilities that support increasingly complex clinical development programs. This acquisition reflects Labcorp's ongoing commitment to investing in central laboratory services and meeting the evolving needs of clinical trial sponsors worldwide. Evercore served as exclusive financial advisor to Labcorp and Pierson Ferdinand and Hogan Lovells served as Labcorp's legal counsel. About Labcorp Labcorp (NYSE: LH) is a global leader of innovative and comprehensive laboratory services that helps doctors, hospitals, pharmaceutical companies, researchers and patients make clear and confident decisions. BiopharmaWatch provide insights and advance science to improve health and improve lives through its unparalleled diagnostics and drug development laboratory capabilities. The company's nearly 71,000 employees serve clients in approximately 100 countries, provided support for more than 85% of the new drugs and therapeutic products approved by the FDA in 2025 and performed more than 750 million tests for patients around the world. Learn more at www.labcorp.com. Cautionary Statement Regarding Forward-Looking Statements This press release contains forward-looking statements, including, but not limited to, statements with respect to the acquisition of MLM Medical Labs and how its capabilities are anticipated to benefit clinical trial sponsors. Each of the forward-looking statements is subject to change based on various important factors, many of which are beyond the company's control. These factors, in some cases, have affected and in the future (together with other factors) could affect the company's ability to implement the company's business strategy, and actual results could differ materially from those suggested by these forward-looking statements. As a result, readers are cautioned not to place undue reliance on any of the forward-looking statements. The company has no obligation to provide any updates to these forward-looking statements even if its expectations change. All forward-looking statements are expressly qualified in their entirety by this cautionary statement. Further information on potential factors, risks and uncertainties that could affect operating and financial results is included in the company's most recent Annual Report on Form 10-K under the heading RISK FACTORS and in the company's other filings with the SEC. The information in this press release should be read in conjunction with a review of the company's filings with the SEC including the information in the company's most recent Annual Report on Form 10-K under the heading "MANAGEMENT'S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS." Frequently asked questions. What is the significance of Labcorp's acquisition of MLM? The acquisition enhances Labcorp's global laboratory network and strengthens its biomarker testing capabilities. How does this acquisition impact clinical trials? It supports complex multinational clinical trials with improved scientific and operational oversight. Where does MLM operate? MLM has operations in the United States, Germany, and South Africa. What regions will Labcorp's network cover after the acquisition? Labcorp will have a wholly owned laboratory network across North America, Europe, Asia, and Africa.

PR Newswire
Sep 5th, 2026
If you conducted Search Queries on Labcorp's website from May 1, 2021 to April 1, 2026, a class action settlement may affect you.

If you conducted Search Queries on Labcorp's website from May 1, 2021 to April 1, 2026, a class action settlement may affect you. Sep 04, 2026, 20:00 ET GREENSBORO, N.C., Sept. 4, 2026 /PRNewswire/ - WHAT IS THIS ABOUT? Plaintiffs allege that Labcorp violated California and Pennsylvania wiretapping laws by facilitating, through third-party tracking technologies, the interception of personally identifiable information and searches that users conducted on Labcorp's website. Labcorp denies these and all other allegations of wrongdoing and liability, and denies all claims asserted against it. Plaintiffs and Labcorp have agreed to a settlement to resolve this lawsuit. The Court has not decided who is right or wrong. WHO IS INCLUDED? The Settlement Classes are defined as follows: * California Settlement Class: All persons in California who conducted Search Queries on Labcorp's website from May 1, 2021 to April 1, 2026. * Pennsylvania Settlement Class: All persons in Pennsylvania who conducted Search Queries on Labcorp's website from May 1, 2021 to April 1, 2026. "Search Queries" means search terms and/or search queries, including but not limited to, entry of any search term(s) into a search bar or search menu on the Labcorp website, www.labcorp.com and its subpages, as well as making any selection(s) from any drop-down menu on the website. WHAT DOES THE SETTLEMENT PROVIDE? If the settlement is approved, or after any potential appeals of that approval are resolved, Labcorp has agreed to the following terms: * Not using or enabling certain tracking technologies (as defined by the settlement agreement, but examples include the Meta Pixel and Google Analytics) on its website, labcorp.com or any of its subpages, for two years; * Conducting an annual review and preparing a compliance report demonstrating that it is not using technologies prohibited by the settlement; * Creating or maintaining a written policy regarding the appropriate use of externally developed tracking technologies on its website; and * Designating a senior employee responsible for overseeing compliance with the above terms. YOUR OPTIONS. The settlement provides only injunctive relief (e.g., business practice terms). Under the settlement terms, Settlement Class Members (except for Settlement Class Representatives) will not release any claims for damages or other monetary relief. If the settlement is approved, you will give up the right to sue Labcorp and other affiliated entities for injunctive relief claims arising from or related to the allegations in this lawsuit. Because the plaintiffs are seeking only injunctive relief and because Labcorp is only agreeing to injunctive relief, Settlement Class Members cannot opt out of the settlement. This means that all members of the Settlement Class will be bound by the settlement, if the Court approves it. If you are a Settlement Class Member, you may object to or comment upon the proposed settlement, explaining why you believe the settlement should not be approved. All objections must be postmarked by November 23, 2026. For more information on how to object, visit www.LaboratoryCorporationWebsiteSettlement.com or call 1-877-378-7520. At the Final Approval Hearing, the Court will consider whether the settlement is fair, reasonable, and adequate, and whether to award attorneys' fees, expenses, and service awards, and in what amounts. If there are objections, the Court will consider them. After the hearing, the Court will decide whether to approve the Settlement. It is not necessary for you to attend this hearing, but you may attend at your own expense. If you have any questions or want more information about the settlement, please visit www.LaboratoryCorporationWebsiteSettlement.com or contact the Settlement Administrator at 1-877-378-7520. SOURCE U.S. District Court for the Middle District of North Carolina