Senior Application Security Engineer – Cloud & DevSecOps

Blue Cross and Blue Shield of Kansas Inc.; Washington (District of Columbia); Hybride; USD 119 000 - 172 000; Plein temps

Avantages offerts par ce poste

Annual bonus incentive

Paid time off

11 holidays

Medical insurance

Dental insurance

Vision insurance

401(k) matching

Lifestyle spending account

Résumé du poste

Blue Cross and Blue Shield of Kansas Inc. seeks a Security Engineer (Application Security) to apply security practices across cloud-native, web, API, containerized, and microservices apps.

The role emphasizes agile collaboration with architects, risk management, and secure SDLC integration. Responsibilities include leading security roadmaps, incident response support, and implementing robust testing such as SAST, DAST, SBOM analysis, and API security assessments.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field or equivalent work experience.
• 5+ years cybersecurity experience with a focus on application security and secure software development practices.
• Experience with risk remediation, prioritization, and stakeholder collaboration.
• Experience with SAST, DAST, SCA, SBOM analysis, and API security assessments.
• Experience managing the Application Vulnerability Assessment (AVA) cycle.
• Experience with cloud-native, web, API, containerized apps across Azure, AWS, Kubernetes, OpenShift.

Responsabilités

• Collaborate with architects and stakeholders to interpret engineering guidance within security domains.
• Lead creation of roadmaps for multiple projects and drive process improvements.
• Develop and oversee risk management frameworks and monitoring.
• Participate in domain-related incident response and governance activities.
• Apply security controls across DevSecOps pipelines and secure SDLC practices.

Connaissances

Application security

Vulnerability management

Risk assessment

SAST

DAST

SCA

API security

OWASP Top 10

Kubernetes

OpenShift

Terraform

GitHub Actions

DevSecOps

Formation

Bachelor's degree in Computer Science, Information Security, or related field

Outils

Burp Suite

OWASP ZAP

Checkmarx

Veracode

Fortify

GitHub Advanced Security

SonarQube

Postman

SoapUI

Description du poste

Blue Cross and Blue Shield of Kansas Inc. seeks a Security Engineer (Application Security) to apply security practices across cloud-native, web, API, containerized, and microservices apps.

The role emphasizes agile collaboration with architects, risk management, and secure SDLC integration. Responsibilities include leading security roadmaps, incident response support, and implementing robust testing such as SAST, DAST, SBOM analysis, and API security assessments.