Info Protection Advisor-App Security Eng- Hybrid
Core
Application Security Engineer leading AppSec activities to guide the design, development, and security of cloud-hosted and open-source applications.
Role type
Senior IC Application Security Engineer
Builds
Secure cloud-hosted and open-source applications
Domain
Healthcare technology / Application Security
Required skills
SAST/DAST tool usage, secure coding standards (OWASP Top 10), CI/CD pipeline security, container security, identity management (OAuth, SAML, JWT), risk assessment, vulnerability remediation
Preferred skills
DevSecOps integration, NIST/ISO 27001 compliance, SEI Cert knowledge
Technologies
Nessus, Qualys, Burp Suite, GitHub Actions, Jenkins, SAST, DAST, SCA
Responsibilities
Inspect application code for security issues and build frameworks for secure CI/CD integration; Perform focused risk assessments of services and technologies; Assist development teams with secure code reviews and AppSec assessments; Implement and manage automated security controls in CI/CD pipelines; Educate teams on vulnerability remediation using SAST, SCA, and DAST tools; Establish and maintain secure coding standards and best practices.
Seniority
Senior, hands-on IC