Role OverviewContribute to Security by Design practices, secure application software development lifecycle practices, security testing and assessment, and the integration of security with DevOps. This role is responsible for security engineering of cloud environments (AWS, Azure) and vulnerability management across both Infrastructure as Code (IaC) and application development (SAST/DAST).
What You Will Do
Analyze, validate, communicate, and consult on security defects identified through automated and manual sources, serve as a trusted resource to software engineers, architects, product owners, and leaders, and enable and monitor automated defect detection tooling.
Why It Might Be a Fit
8+ years of experience in information security, or Master's degree with 6+ years of experience, and excellent written and verbal communication skills to communicate highly technical security concepts to non-security audiences.
Requirements
- Bachelor's degree in Computer Science or a related field
- 8+ years of experience in information security
- Application security expertise, including understanding of vulnerabilities and remediation solutions
- Experience with a wide variety of information security processes and principles
- Cloud security experience with Microsoft Azure and/or AWS
- Professional certification such as CISSP, CCSP, GWAPT, GWEB, or AWS Certified Security - Specialty
- Development experience in Java, Python, .NET, JavaScript, or an equivalent language
- Experience implementing automation and scripting
- AI fluency is preferred
Benefits
- 401(k)
- Dental insurance
- Vision Insurance
- Disability insurance
- Employee assistance program
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Paid Holidays
]]>