Senior AppSec Engineer - Secure SDLC & Pen Testing

Conditions. Workplace Diversity, LLC.; Boston (MA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Generous paid time off

Medical, dental, and vision coverage

Retirement plans with university 100%+

Wellbeing resources

Family support

Tuition assistance and professional发展

Commuter benefits and campus perks

Job summary

Harvard Medical School is seeking a Senior Security Engineer to advance the organization's application security, Secure SDLC, and penetration testing programs. You will work with HMS IT and Security to implement Secure SDLC practices, operate security testing platforms, and improve security throughout the software lifecycle.

Responsibilities include conducting penetration testing of applications, systems, and cloud environments, administering security platforms, and collaborating with

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant experience.
• 7+ years of post-secondary education or relevant work experience.
• Experience using common security testing and analysis tools.
• Ability to communicate technical security findings to technical and non-technical audiences.
• Hands-on experience performing penetration testing of web applications, systems, networks, cloud environments, or APIs.
• Familiarity with offensive security tools, techniques, and methodologies.
• Experience with Secure SDLC concepts and application security testing tools such as Checkmarx, Burp Suite, Veracode, GitHub Advanced Security, or similar platforms.

Responsibilities

• Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
• Identify security weaknesses and provide remediation recommendations.
• Support Secure SDLC initiatives and collaborate with development teams to improve application security.
• Administer and support application security platforms and testing tools.
• Conduct threat research and stay current on emerging attack techniques and trends.
• Inform the organization of emerging threats, attack techniques, vulnerabilities, and risks.
• Research, evaluate, and recommend new security tools, technologies, and processes.

Skills

Penetration testing

Security testing tools

OWASP Top 10

Secure SDLC concepts

Communicate security findings

Education

Bachelor's degree in Cybersecurity/CS/IT/Eng

7+ years relevant work experience

Tools

Checkmarx

Burp Suite

Veracode

GitHub Advanced Security

Job description

Harvard Medical School is seeking a Senior Security Engineer to advance the organization's application security, Secure SDLC, and penetration testing programs. You will work with HMS IT and Security to implement Secure SDLC practices, operate security testing platforms, and improve security throughout the software lifecycle.

Responsibilities include conducting penetration testing of applications, systems, and cloud environments, administering security platforms, and collaborating with