Sr Engineer I, Product Security

NextGen Healthcare, Inc.; Georgia; On-site; USD 110,000 - 150,000; Full time

Job summary

NextGen Healthcare, Inc. is seeking a Sr. Engineer I, Product Security to lead security assessments, threat modeling, and the implementation of security best practices across product teams.

You will integrate security tools into CI/CD, develop tooling, stay current with threats, and guide development through secure SDLC. 5+ years in the field and experience with OWASP/NIST required.

Qualifications

• 5+ years in product security, application security, or software engineering.
• Experience with security tools and frameworks (OWASP, NIST, etc.).
• Experience with security testing methodologies and tools (static/dynamic analysis, pentesting).

Responsibilities

• Perform security reviews and threat modeling of product features and architectures.
• Develop and maintain security tooling, guidelines, and standards for product development.
• Provide security guidance and support to product teams throughout the software development lifecycle.
• Research and evaluate new security technologies and solutions.
• Stay up to date with the latest security trends and threats.
• Integrate security tools into CI/CD and finetune rules to reduce false positives.
• Write scripts to automate manual tasks.
• Perform other duties that support the overall objective of the position.

Skills

Web security

Mobile security

Cloud security

Cryptography

Network security

Python/Java/C#

Communication

Analytical skills

Education

Bachelor's degree in CS/Engineering

Tools

OWASP

NIST

Static analysis

Dynamic analysis

Penetration testing

Job description

Job Description:

The Sr. Engineer I, Product Security is responsible for conducting security assessments, implementing security best practices, and collaborating with product teams to ensure that our products meet the highest security standards.

• Perform security reviews and threat modeling of product features and architectures.
• Develop and maintain security tooling, guidelines, and standards for product development.
• Provide security guidance and support to product teams throughout the software development lifecycle.
• Research and evaluate new security technologies and solutions.
• Stay up to date with the latest security trends and threats.
• Integrate security tools into CI/CD and finetune rules to reduce false positives.
• Write scripts to automate manual tasks.
• Perform other duties that support the overall objective of the position.

Education Required:

• Bachelor's degree in computer science, Engineering, or related field.
• Or, any combination of education and experience which would provide the required qualifications for the position.

Experience Required:

• 5+ years of experience in product security, application security, or software engineering.
• Experience with security tools and frameworks (e.g., OWASP, NIST, etc.).
• Experience with security testing methodologies and tools (e.g., static analysis, dynamic analysis, penetration testing, etc.).

Knowledge, Skills & Abilities:

• Knowledge of: Strong knowledge of web and mobile security, cloud security, cryptography, and network security. Proficiency in security technology, frameworks, security testing methodologies and tools. Proficient in at least one programming language (e.g., Python, Java, C#, etc.).
• Skill in: Excellent communication, interpersonal, and collaboration skills. Problem solving, analytical skills.
• Ability to: Identify, troubleshoot and resolve problems quickly using sound judgment, poise and diplomacy. Ability to work independently and as part of a team.

The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the company reserves the right to change this job description and/or assign tasks for the employee to perform, as the company may deem appropriate.

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.