Description

You will design security architectures and implement Secure Development Lifecycle (SDL) processes to ensure compliance with HIPAA, SHIELD Act, and NYC privacy laws.

Responsibilities

• Develop and integrate automated DevSecOps tools into CI/CD pipelines.
• Lead threat modeling sessions to identify vulnerabilities and recommend mitigation strategies.
• Analyze static and dynamic scan results to define remediation approaches.
• Provide technical guidance to engineering teams on security controls and best practices.
• Deploy security tools to automate tasks and mitigate technical risks.

Required Skills

• 7+ years of security engineering experience.
• 5 years of application development experience.
• 10 years of total Information Technology experience.
• Strong knowledge of OWASP, SANS, and NIST standards.
• Hands-on experience with SDLC, DevOps, and DevSecOps integration.
• Experience designing API security and access controls using OAuth, SAML, Web SSO, AWS IAM, and Federation.
• 3+ years using tools such as SD Elements, Veracode, Tenable, or Rapid7.
• Experience integrating issue tracking with ServiceNow.
• Bachelor's degree in information security, systems, or related field.

Preferred Skills

• CISSP or CCSP certification.

Key Skills

Education

Bachelor's Degree