Senior App Security Engineer | Pen Testing & SDLC

Harvard Medical School; Boston (MA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Retirement plans

Parental leave

Job summary

Harvard Medical School is seeking a Senior Security Engineer to advance HMS's application security program, Secure SDLC, and penetration testing. You will partner with HMS IT and Security to implement secure coding practices, operate testing platforms, and drive remediation across the software lifecycle.

In this role you will perform penetration testing of applications, systems, and cloud environments, stay current on threats, and help mature HMS's security capabilities through collaboration

Qualifications

• Minimum of seven years’ post-secondary education or relevant work experience.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant experience.
• Experience using common security testing and analysis tools.
• Ability to communicate technical security findings and remediation recommendations to both technical and non-technical audiences.
• Hands-on experience performing penetration testing of web applications, systems, networks, cloud environments, or APIs.
• Experience with Secure SDLC concepts and application security testing tools such as Checkmarx, Burp Suite, Veracode, GitHub Advanced Security, or similar platforms.

Responsibilities

• Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
• Identify security weaknesses and provide remediation recommendations through technical testing.
• Support Secure SDLC initiatives and collaborate with development teams to improve application security.
• Administer and support application security platforms and testing tools.
• Assist with implementation and operation of SAST, SCA, DAST, API Security, Secrets Detection, and related application security capabilities.
• Conduct threat research and stay current on emerging attack techniques, vulnerabilities, adversary activity, and security trends.
• Inform the organization of emerging threats, attack techniques, vulnerabilities, and risks.
• Serve as an information security subject matter expert in penetration testing and application security.
• Research, evaluate, and recommend new security tools, technologies, and processes that improve HMS security capabilities.
• Abide by and follow Harvard University IT technical standards, policies, and Code of Conduct.

Skills

Penetration testing

Threat research

Communicating findings

Security tooling

Team collaboration

Analytical thinking

Offensive security

Education

Bachelor's degree in Cybersecurity or related field

Tools

Checkmarx

Burp Suite

Veracode

GitHub Advanced Security

Job description

Harvard Medical School is seeking a Senior Security Engineer to advance HMS's application security program, Secure SDLC, and penetration testing. You will partner with HMS IT and Security to implement secure coding practices, operate testing platforms, and drive remediation across the software lifecycle.

In this role you will perform penetration testing of applications, systems, and cloud environments, stay current on threats, and help mature HMS's security capabilities through collaboration