Cyber Security Engineer (Application Security)
New
T
TherapyNotesHealthcare software
Workable workplace: remote; Workable locations: Philadelphia, Pennsylvania, United StatesFull-TimeSenior
SalaryCompetitive salary - $110,000-$130,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in application security or security engineering.
- Required Skills
- CI/CDTerraformGitHub ActionsHIPAA
Requirements
- Have 5+ years of experience in application security or security engineering.
- Bring demonstrated experience securing CI/CD pipelines and GitHub Actions.
- Have experience with SAST/DAST and triaging code, secret, and dependency-scanning findings; GitHub Advanced Security and Snyk are examples.
- Understand runner and workflow-permission security, third-party action risk, and software supply-chain controls.
- Have experience reviewing Terraform or other infrastructure-as-code for security misconfigurations.
- Have working knowledge of SIEM, EDR/XDR, and DLP platforms, including deployment, tuning, and alert triage.
- Understand Zero Trust architecture principles and their application to application and identity access.
- Understand HIPAA, HITECH, and HITRUST and their impact on application security.
- Have API security experience, particularly with integrations to other healthcare systems; familiarity with HL7 or other healthcare data standards is preferred.
- Have experience securing cloud environments; Azure is preferred and AWS is a plus.
- Be willing to participate in an incident response on-call rotation.
- A bachelor's degree in information security, computer science, or a related field is preferred; equivalent experience is considered.
- Relevant certifications such as GWAPT, OSWE, GPEN, or Azure/AWS cloud security certifications are ideal; CISSP or HCISPP is a plus.
Responsibilities
- Integrate security into the Software Development Lifecycle and CI/CD pipeline in collaboration with development teams.
- Enforce secure coding standards and perform application security assessments, code reviews, and threat modeling.
- Own GitHub Advanced Security; triage code, secret, and dependency-scanning findings and improve scanning coverage and workflows.
- Secure GitHub Actions identities, runners, permissions, and secrets, and reduce software supply-chain risk.
- Review Terraform and other infrastructure-as-code for security issues and partner with IT platform teams on secure deployment practices.
- Align application security measures with HIPAA, HITRUST, and HITECH requirements and support audits.
- Guide developers in remediating vulnerabilities and implementing patches or mitigations.
- Develop and manage security tools such as SAST, DAST, and vulnerability management systems.
- Support application security incident response, root-cause identification, and resolution.
- Contribute to developer security awareness programs focused on secure coding.
View Full Description & ApplyYou'll be redirected to the employer's site
