Description

Key Responsibilities

• Perform security operations across application security, infrastructure security, and CI/CD pipeline security.
• Support developer onboarding for security tools and processes by providing guidance and training.
• Ensure complete and consistent security scan coverage for assigned applications.
• Identify opportunities to automate recurring security tasks and reduce manual effort.
• Support compliance and risk management by tracking policy adherence and documenting exceptions.
• Improve operational efficiency through automation of security scans, vulnerability triage, and workflow enhancements.
• Manage vulnerability tracking through accurate tagging, ownership assignment, and remediation workflows.
• Increase developer security awareness through continuous support, coaching, and enablement.
• Participate in ServiceNow ticket handling, daily user story updates, and on-call rotations.
• Automate security workflows within a DevSecOps environment.

Required Qualifications

• 3+ years of experience in Security Engineering, DevSecOps, or a related field.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Hands-on experience with application security and CI/CD security tools.
• Strong understanding of secure coding principles and modern software development practices.
• Experience with:
  • SAST (Static Application Security Testing)
  • SCA (Software Composition Analysis)
  • DAST (Dynamic Application Security Testing)
  • MAST (Mobile Application Security Testing)
  • Container Security Scanning
  • Infrastructure as Code (IaC) Security Scanning
• Experience with ServiceNow ticket management and Agile development processes.
• Experience automating security workflows in DevSecOps environments.
• Strong verbal and written communication skills.
• Ability to explain security concepts to both technical and non-technical stakeholders.
• Experience coaching or training developers on security best practices.

Preferred Qualifications

• Experience with mobile application security.
• Knowledge of compliance and regulatory frameworks including:
  • HIPAA
  • PCI-DSS
  • NIST
  • GDPR
  • CCPA
• Experience with cloud platforms:
  • AWS
  • Azure
  • GCP
• Experience with container technologies:
  • Docker
  • Kubernetes
• Security certifications are a plus:
  • CISSP
  • CISM
  • CEH

Technical Skills

• DevSecOps
• Application Security
• Infrastructure Security
• CI/CD Pipeline Security
• SAST
• SCA
• DAST
• MAST
• IaC Security
• Container Security
• Docker
• Kubernetes
• AWS
• Azure
• GCP
• Secure Coding
• Security Automation
• Vulnerability Management
• ServiceNow
• Agile/Scrum
• Risk Management
• Compliance
• HIPAA
• PCI
• NIST
• GDPR
• CCPA

Key Skills

Education

Bachelor's degree