Senior Security Analyst: Protect Health Apps & WAF

Fuze Health; California (MO); On-site; USD 129,000 - 161,000; Full time

Benefits offered by this job

Dental and vision coverage

401(k) retirement plan

Group medical plans

Life Insurance and AD&D

Job summary

Fuze Health is seeking a Senior Security Analyst to join the Information Security Team in the United States. You will drive security testing across applications, coordinate with vendors, and lead SAST programs to help remediation before go-live.

You will work with development teams, maintain WAF alerts, participate in on-call rotations, and advocate secure development within an agile environment while complying with CIS, OWASP, HITRUST, and ISO standards.

Qualifications

• Comfortable in a fast-paced environment with excellent communication skills.
• Providing security recommendations on design and development and coding.
• Strong technical skills in Linux and Windows operating systems, scripting languages like Python.
• Experience with application and infrastructure security as code.
• Ingenuity and strong problem-solving skills to address threats or flaws.

Responsibilities

• Security testing on all company applications and coordinating vendor tests.
• Manage testing scheduling and portfolio of multiple entities.
• Lead SAST service and triage results for remediation guidance.
• Write documentation including policies and procedures.
• Identify opportunities for improvement / automation and shift left.
• Train Security Champions and coordinate remediation with development teams.
• Maintain and monitor Web Application Firewall (WAF) events and alerts.
• Participate in on-call roster (out-of-hours support).

Skills

Linux

Windows

Python

Security testing

SAST

Cloud security

Education

BS in Computer Science or related field

Job description

Fuze Health is seeking a Senior Security Analyst to join the Information Security Team in the United States. You will drive security testing across applications, coordinate with vendors, and lead SAST programs to help remediation before go-live.

You will work with development teams, maintain WAF alerts, participate in on-call rotations, and advocate secure development within an agile environment while complying with CIS, OWASP, HITRUST, and ISO standards.