Senior Security Engineer - App Sec & PenTesting

Harvard University; Boston (MA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement plans

Tuition assistance

Job summary

Harvard Medical School is seeking a Senior Security Engineer to advance HMS's application security, Secure SDLC, and pen-testing programs. You will partner with HMS IT and Security to implement Secure SDLC, operate testing platforms, and collaborate with development teams to improve security across the software lifecycle.

You will perform penetration testing of applications, systems, and cloud environments, support security platforms, conduct threat research, and help mature HMS's application

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Experience using common security testing and analysis tools.
• Ability to communicate security findings to technical and non-technical audiences.
• Hands-on experience with penetration testing of web apps, systems, networks, cloud environments, or APIs.
• Familiarity with offensive security tools, techniques, and methodologies.
• Experience identifying web app vulnerabilities (OWASP Top 10).
• Experience with Secure SDLC concepts and testing tools (Checkmarx, Burp Suite, Veracode, GAS).
• Experience creating technical security reports and remediation recommendations.

Responsibilities

• Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
• Identify weaknesses and provide remediation recommendations.
• Support Secure SDLC initiatives and collaborate with development teams.
• Administer and support application security platforms and testing tools.
• Conduct threat research and stay current on threats and trends.
• Inform the organization of threats and risks.
• Work with SecOps during security incidents and investigations.
• Advise on new security tools and processes to improve HMS security.

Skills

Penetration testing

Threat research

Secure SDLC

Application security

OWASP Top 10

Communication

Team collaboration

Security tooling

Cloud security

Analytical thinking

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering

7+ years post-secondary education or relevant work experience

Tools

Burp Suite

Checkmarx

Veracode

GitHub Advanced Security

Job description

Harvard Medical School is seeking a Senior Security Engineer to advance HMS's application security, Secure SDLC, and pen-testing programs. You will partner with HMS IT and Security to implement Secure SDLC, operate testing platforms, and collaborate with development teams to improve security across the software lifecycle.

You will perform penetration testing of applications, systems, and cloud environments, support security platforms, conduct threat research, and help mature HMS's application