Application Security Engineer — Secure SDLC & Risk Reduction

BigRio; United States; In loco; USD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

BigRio is seeking an Application Security Engineer to mature its security program across web, API, and pipeline apps, embedding security by design throughout the SDLC and protecting sensitive patient data.

You will implement SonarQube and Burp tooling, partner with engineering to remediate findings, and drive a structured remediation program while aligning with HIPAA and regulatory requirements. This is a chance to shape risk reduction across the organization.

Competenze

• Bachelor's degree or equivalent in computer science, cybersecurity, or related field.
• 3–5 years in application security, DevSecOps, or security-focused software engineering.
• Hands-on experience with SonarQube for static code analysis and code quality gating.
• Familiarity with SAST/DAST/SCA/IAST tooling and CI/CD integration.
• Strong communication skills for cross-functional collaboration and risk translation.
• Knowledge of HIPAA, NIST, and GDPR as they apply to healthcare data.

Mansioni

• Implement and manage static and dynamic code analysis within CI/CD pipelines.
• Perform penetration tests and remediation of findings across web, API, and pipelines.
• Develop a structured remediation program to address security findings quickly.
• Evolve SDLC into a Secure SDLC by embedding Security by Design and Privacy by Design.
• Provide guidance on secure coding, threat modeling, and secure architecture reviews.
• Generate regular security and risk reports for technical and executive audiences.
• Collaborate with auditors and draft security policies and procedures as needed.
• Partner with IT, Privacy, Compliance, and business units to reduce risk.

Conoscenze

Application security

DevSecOps

Code review

Threat modeling

Security by Design

Cross-functional collaboration

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

SonarQube

Burp Suite

Descrizione del lavoro

BigRio is seeking an Application Security Engineer to mature its security program across web, API, and pipeline apps, embedding security by design throughout the SDLC and protecting sensitive patient data.

You will implement SonarQube and Burp tooling, partner with engineering to remediate findings, and drive a structured remediation program while aligning with HIPAA and regulatory requirements. This is a chance to shape risk reduction across the organization.