Security Engineer: AppSec, Risk & Roadmap Lead

Blue Cross Blue Shield Association; Chicago (IL); On-site; USD 119,000 - 172,000; Full time

Job summary

Blue Cross Blue Shield Association in Chicago seeks an experienced security engineering professional to collaborate with architects and stakeholders to interpret and implement guidance within a security program. You will lead roadmaps, drive process improvements, and optimize costs while strengthening risk management.

The role covers application security across cloud-native, web, API, containerized and microservices apps, supports the vulnerability lifecycle, and ensures testing is integrated

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field or equivalent work experience.
• 5+ years cybersecurity experience with focus on application security, vulnerability assessments, and secure software development practices.
• Experience implementing risk remediation prioritization and collaboration with key stakeholders to understand risk drivers and remediation blockers.
• Experience monitoring and tracking remediation efforts, staying abreast of emerging threats, and leading the design, implementation, and maintenance of domain specific toolsets.
• Experience conducting SAST, DAST, SCA, SBOM analysis, API security assessments, secure code reviews, threat modeling, and risk assessments.
• Experience with cloud-native, web, API, containerized, and microservices-based apps across Azure, AWS, Kubernetes, OpenShift.

Responsibilities

• Collaborate with Architects and stakeholders to interpret engineering guidance within a security domain and contribute to multiple projects.
• Lead the creation of comprehensive roadmaps for multiple projects or departments.
• Champion operational excellence by designing and executing process improvement initiatives.
• Drive cost optimization by identifying and implementing strategic savings opportunities.
• Enhance security risk visibility by developing and overseeing risk management frameworks.
• Participate in domain-related incident response, maintain security architecture, and manage domain-specific security tools.

Skills

Cybersecurity

Application security

Risk remediation

Threat modeling

Audits & compliance

DevSecOps

Cloud security

Python/Java coding

SAST/DAST/SCA

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Snyk

Job description

Blue Cross Blue Shield Association in Chicago seeks an experienced security engineering professional to collaborate with architects and stakeholders to interpret and implement guidance within a security program. You will lead roadmaps, drive process improvements, and optimize costs while strengthening risk management.

The role covers application security across cloud-native, web, API, containerized and microservices apps, supports the vulnerability lifecycle, and ensures testing is integrated