AppSec, DevSecOps Engineer

Vaga não está no LinkedIn

🕒 Abril 15

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $120.000 - $135.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Public Partnerships | PPL

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

⚕️ Seguro de Saúde

🤝 B2B

Healthcare Insurance • B2B

A Public Partnerships | PPL é uma fornecedora de serviços de gestão financeira e administrativa que possibilitam o cuidado de longo prazo autoproposto pelo Medicaid. A empresa ajuda os participantes elegíveis do Medicaid a contratar e gerenciar cuidadores (incluindo familiares ou amigos), lida com a folha de pagamento, pagamentos, documentos fiscais e de conformidade, e oferece ferramentas online e suporte para participantes, cuidadores e administradores de programas. A PPL faz parceria com agências estaduais do Medicaid e organizações de cuidados gerenciados para administrar programas de cuidado autoproposto em vários estados, com o objetivo de simplificar a administração do programa e manter as pessoas em suas casas.

Descrição

• Integrate security at every phase of the software development lifecycle. • Collaborate with engineering and product teams in Agile/Scrum environments to prioritize, track, and remediate security issues during sprint cycles. • Develop and maintain threat models and perform design reviews. • Lead threat modeling sessions and conduct in-depth security architecture reviews. • Educate development teams on secure coding practices. • Actively support the organization’s secure software development lifecycle (SDLC) initiatives by integrating security controls, processes, and testing into development workflows and CI/CD pipelines. • Integrate security testing tools (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines. • Perform and manage vulnerability assessments, code reviews, and penetration testing. • Secure containerized environments (Docker, Kubernetes). • Ensure cloud infrastructure security (AWS/GCP/Azure) using infrastructure-as-code (IaC) tools like Terraform or CloudFormation. • Support documentation and evidence collection for SOC 2 Type II audits and HIPAA security risk assessments.

🎯 Requisitos

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience) • 5+ years of experience in AppSec, DevSecOps, or related roles • 7+ years experience in related field (preferred) • Certifications: OSCP, CISSP, CSSLP, CEH, or similar. • Experience with cloud-native security in Azure, AWS, and GCP. • Hands-on experience with NIST, HIPAA, and SOC 2 application security compliance, including security assessments and control implementation. • Experience leading penetration testing engagements and managing remediation in collaboration with development teams. • Experience with bug bounty programs or working with security researchers. • Experience implementing or supporting a security champions program is a plus.

🏖️ Benefícios

• 401k Retirement Plan • Medical, Dental and Vision insurance on first day of employment • Generous Paid Time Off • Employee Assistance Program and more