Senior Security Engineer - AppSec & Pen Testing

Harvard University; Massachusetts; Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Generous PTO

Medical, dental, and vision insurance

Retirement plans

Wellbeing resources

Tuition assistance

Job summary

Harvard University invites applications for a Senior Security Engineer to support and advance the university's application security program across Harvard Medical School IT environments. The role emphasizes implementing Secure SDLC practices, leading penetration testing, and maturing HMS security capabilities with development teams.

You will perform testing on applications, systems, and cloud environments, conduct threat research, and report findings to technical and non-technical stakeholders

Qualifications

• Minimum of seven years’ post-secondary education or relevant work experience.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant experience.
• Experience using common security testing and analysis tools.
• Ability to communicate technical security findings to technical and non-technical audiences.

Responsibilities

• Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
• Identify security weaknesses and provide remediation recommendations through technical testing.
• Support Secure SDLC initiatives and collaborate with development teams to improve application security.
• Administer and support application security platforms and testing tools.
• Assist with implementation and operation of SAST, SCA, DAST, API Security, Secrets Detection, and related application security capabilities.
• Conduct threat research and stay current on emerging attack techniques, vulnerabilities, adversary activity, and security trends.
• Inform the organization of emerging threats, attack techniques, vulnerabilities, and risks.

Skills

Penetration testing

Secure SDLC

Application security

Threat research

Communication

Security tooling

OWASP Top 10

Security reporting

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Checkmarx

Burp Suite

Veracode

GitHub Advanced Security

Job description

Harvard University invites applications for a Senior Security Engineer to support and advance the university's application security program across Harvard Medical School IT environments. The role emphasizes implementing Secure SDLC practices, leading penetration testing, and maturing HMS security capabilities with development teams.

You will perform testing on applications, systems, and cloud environments, conduct threat research, and report findings to technical and non-technical stakeholders