Senior Application Security Engineer - Cloud, API & DevSecOps

Blue Cross Blue Shield Association; United States; Vor Ort; USD 119.000 - 172.000; Vollzeit

Benefits dieser Stelle

Paid time off

11 holidays

Medical/dental/vision insurance

401(k) matching

Lifestyle spending account

Zusammenfassung

Blue Cross Blue Shield Association is seeking an experienced security engineering professional to collaborate with architects and stakeholders to drive security in a cloud-native, web, API, and containerized environment. You will lead roadmaps, champion process improvements, and optimize costs while enhancing risk visibility and incident response readiness.

The role emphasizes application security across SDLC/DevSecOps, with experience in SAST/DAST, threat modeling, and IaC automation.

Qualifikationen

• Bachelor's degree in Computer Science, Information Security, or related field or equivalent work experience.
• 5+ years cybersecurity experience with focus on application security, vulnerability assessments, and secure software development practices.
• Experience with risk remediation prioritization and stakeholder collaboration to understand risk drivers and remediation blockers.
• Experience monitoring remediation efforts, staying current with threats, and designing and maintaining domain-specific toolsets.
• Experience with SAST/DAST, API security assessments, SBOM analysis, threat modeling, and risk assessments.
• Experience managing the AVA cycle including planning, validation, reporting and remediation guidance.
• Experience across Azure, AWS, Kubernetes, OpenShift in cloud-native, web, API, containerized apps.
• Experience with auditors/GRC teams to provide assessment evidence and support compliance.
• Experience with IaC tools (Terraform, Bicep, ARM, YAML) and automation/security testing scripts.

Aufgaben

• Collaborate with Architects and stakeholders to interpret guidance within a security domain and contribute to multiple projects.
• Lead the creation of roadmaps for projects or departments.
• Design and execute process improvements to drive operational excellence.
• Identify and implement cost-saving opportunities.
• Develop and oversee robust risk management frameworks to enhance security visibility.
• Contribute to incident response, maintain security architecture, and manage domain-specific tools.
• Apply security engineering across cloud-native, web, API, containerized, and microservices apps throughout SDLC and DevSecOps pipelines.

Kenntnisse

App security

SAST/DAST

Threat modeling

DevSecOps

Cloud security

GRC collaboration

OWASP Top10

API security

Automation scripting

Python/Java

Communication skills

HIPAA/HITRUST

Ausbildung

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Snyk

Mend/WhiteSource

Black Duck

Dependabot

JFrog Xray

Prisma Cloud

Tenable Cloud

Trivy

Kubernetes manifests

Jobbeschreibung

Blue Cross Blue Shield Association is seeking an experienced security engineering professional to collaborate with architects and stakeholders to drive security in a cloud-native, web, API, and containerized environment. You will lead roadmaps, champion process improvements, and optimize costs while enhancing risk visibility and incident response readiness.

The role emphasizes application security across SDLC/DevSecOps, with experience in SAST/DAST, threat modeling, and IaC automation.