Lead App Security Engineer - Cloud, API & DevSecOps

Blue Cross Blue Shield Association; Washington (District of Columbia); Hybrid; USD 119.000 - 172.000; Vollzeit

Benefits dieser Stelle

Health insurance

401(k) match

Paid time off

Zusammenfassung

Blue Cross Blue Shield Association is seeking an experienced security engineer to design and implement secure software practices across cloud-native, web, API, containerized, and microservices environments. You will collaborate with architects and stakeholders to build roadmaps, drive risk management, and lead process improvements within a hybrid, security-focused program.

The role emphasizes vulnerability testing, DevSecOps integration, and working with SAST/DAST, SBOM, and cloud tools across

Qualifikationen

• Required bachelor’s degree or equivalent work experience in a security-related field.
• Minimum 5+ years cybersecurity experience with emphasis on application security.
• Proven ability to implement risk remediation and collaborate with stakeholders.
• Experience with SAST/DAST/SCA/SBOM, API security, and secure code reviews.

Aufgaben

• Collaborate with architects and stakeholders to interpret and implement security guidance.
• Lead roadmaps for multiple projects or departments.
• Design and execute process improvement initiatives for operational excellence.
• Identify and implement cost-optimization opportunities.
• Develop and oversee risk management frameworks and incident response.
• Maintain security architecture and domain-specific security tools.

Kenntnisse

Application security

Risk management

Threat modeling

DevSecOps

Cloud security

Security architecture

Communication skills

Project leadership

Ausbildung

Bachelor’s Degree in Computer Science, Information Security, or related field or equivalent work experience

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Snyk

Ten able

Jobbeschreibung

Blue Cross Blue Shield Association is seeking an experienced security engineer to design and implement secure software practices across cloud-native, web, API, containerized, and microservices environments. You will collaborate with architects and stakeholders to build roadmaps, drive risk management, and lead process improvements within a hybrid, security-focused program.

The role emphasizes vulnerability testing, DevSecOps integration, and working with SAST/DAST, SBOM, and cloud tools across