Hybrid Application Security Engineer – Cloud & DevSecOps

Cybersecurity Jobs; Chicago (IL); Hybrid; USD 119,000 - 172,000; Full time

Benefits offered by this job

Paid time off

11 holidays

Medical, dental, and vision insurance

401(k) matching

Lifestyle spending account

Bonus incentive potential

Job summary

Blue Cross Blue Shield Association is seeking a Security Engineer focused on application security to strengthen secure engineering practices across cloud-native and software delivery environments.

In this hybrid role based in Chicago, you will apply security engineering and assessment approaches spanning web, API, containerized, and microservices-based applications, while partnering with architects and stakeholders to support roadmaps, risk management, and incident response readiness within the

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent work experience.
• 5+ years of cybersecurity experience with focus on application security and secure SDLC practices.
• Experience with risk remediation prioritization and stakeholder collaboration.
• Experience with AVA lifecycle, SAST/DAST/Software supply chain security, and cloud-native apps.
• Proficiency with common scripting languages and ability to review code.

Responsibilities

• Apply security engineering and testing across web, API, containerized, and microservices apps.
• Lead roadmaps for projects and drive risk management and remediation.
• Support incident response readiness and governance, risk, and compliance activities.
• Integrate security controls throughout SDLC and DevSecOps pipelines.
• Collaborate with auditors and security teams to provide evidence and remediation guidance.

Skills

Application security

Vulnerability assessments

DevSecOps

SAST

DAST

Threat modeling

Cloud security

Python/Java

Communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Job description

Blue Cross Blue Shield Association is seeking a Security Engineer focused on application security to strengthen secure engineering practices across cloud-native and software delivery environments.

In this hybrid role based in Chicago, you will apply security engineering and assessment approaches spanning web, API, containerized, and microservices-based applications, while partnering with architects and stakeholders to support roadmaps, risk management, and incident response readiness within the