Cyber Security Engineer

Job Summary

To enhance application security in a healthcare-regulated environment, the full-time Cyber Security Engineer will manage security integration within the SDLC and CI/CD pipeline, perform security assessments, and collaborate with development teams while working remotely.

Key responsibilities

• Collaborate with development teams to integrate security practices into the Software Development Lifecycle (SDLC) and CI/CD pipeline
• Perform in-depth security assessments, code reviews, and threat modeling to identify vulnerabilities and risks
• Manage GitHub Advanced Security triage findings and secure CI/CD pipelines to mitigate software supply chain risks

Required qualifications

• Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered
• 5+ years of experience in application security or security engineering
• Demonstrated experience securing CI/CD pipelines and performing code and dependency scanning
• Strong understanding of healthcare regulations such as HIPAA, HITECH, and HITRUST
• Experience with API security and securing cloud environments, preferably Azure