Senior Application Security Engineer - Cloud & DevSecOps

001_BCBSA Blue Cross and Blue Shield Association; Chicago, Washington (IL, District of Columbia); Hybrid; USD 119,000 - 172,000; Full time

Benefits offered by this job

Paid time off

11 holidays

Medical/dental/vision insurance

401(k) matching

Lifestyle spending account

Job summary

Blue Cross Blue Shield Association (BCBSA) is seeking aSecurity Architect to collaborate with architects and stakeholders, interpreting engineering guidance and leading roadmaps for security programs. You will champion operational excellence, drive cost optimization, and enhance risk visibility by developing robust risk management frameworks.

The role involves incident response, maintaining security architecture, and managing domain-specific tools across cloud-native, web, API, containerized,

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field or equivalent work experience.
• 5+ years cybersecurity experience focused on application security and secure software development practices.
• Experience with SAST, DAST, SCA, SBOM analysis, API security assessments and threat modeling.
• Experience across cloud-native, web, API, containerized and microservices apps (Azure, AWS, Kubernetes, OpenShift).

Responsibilities

• Lead roadmaps for multiple projects or departments in a security domain.
• Design and execute process improvements to achieve operational excellence.
• Identify savings opportunities to drive cost optimization.
• Develop and oversee robust risk management frameworks to improve security visibility.
• Maintain security architecture and manage domain-specific security tools.

Skills

Security expertise

Communication skills

Analytical thinking

Project management

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Snyk

Job description

Blue Cross Blue Shield Association (BCBSA) is seeking aSecurity Architect to collaborate with architects and stakeholders, interpreting engineering guidance and leading roadmaps for security programs. You will champion operational excellence, drive cost optimization, and enhance risk visibility by developing robust risk management frameworks.

The role involves incident response, maintaining security architecture, and managing domain-specific tools across cloud-native, web, API, containerized,