Senior Security Analyst - Remote AppSec Lead

LetsGetChecked; Colorado; On-site; USD 129,000 - 161,000; Full time

Benefits offered by this job

Dental

Vision

Medical plans

401(k)

Job summary

Fuze Health seeks a Security Engineer to join the Information Security Team in the United States. You will coordinate security testing across company applications, work with vendors, and lead SAST initiatives.

You will collaborate with development teams, maintain the WAF, and participate in on-call duties while advancing secure development practices and compliance with industry standards.

Qualifications

• BS degree in Computer Science or related field.
• AWS Associate and/or Specialist level preferred.
• Certifications such as OSCP, GWAPT, or GPEN preferred.
• Travel within the US may be required on an irregular basis (minimal travel).
• At least 4 years' relevant experience in the cybersecurity industry.

Responsibilities

• Report to the Director of Security Engineering as a key member of the Information Security Team.
• Ensure comprehensive security testing on all company applications by utilizing vendors to conduct tests, and conducting their own security testing.
• Manage testing scheduling and portfolio of multiple company entities.
• Work with teams to perform security testing (including pentesting and architecture reviews) before applications go-live.
• Lead Static Scanning (SAST) service and triage results to advise development teams on remediation areas.
• Write documentation including policies and procedures
• Identify opportunities for improvement / automation.
• Communicate and train our Security Champions as part of effort to shift left
• Work with development teams to remediate and retest items until closure.
• Tracking applications to ensure they have the required level of testing depth and cadence
• Maintain and monitor Web Application Firewall (WAF) events and alerts
• Participate in the on-call roster, including hours outside of normal business

Skills

Linux

Windows

Python

Security testing

Agile

Threat modelling

Security standards

Travel readiness

Education

BS in Computer Science or related field

Tools

OSCP

GWAPT

GPEN

Job description

Fuze Health seeks a Security Engineer to join the Information Security Team in the United States. You will coordinate security testing across company applications, work with vendors, and lead SAST initiatives.

You will collaborate with development teams, maintain the WAF, and participate in on-call duties while advancing secure development practices and compliance with industry standards.