Devsecops chicago urbandale phoenix nyc

Company Profile esrhealthcare.com.mysmartjobboard.com Experience level: Mid-senior Experience required: 5 Years Education level: Bachelor’s degree Job function: Information Technology Industry: Financial Services Compensation: View salary Total position: 1 Relocation assistance: NoJOB DESCRIPTION: is seeking candidates for the following position in our New York, Chicago, Atlanta, Phoenix, or Urbandale offices.Lead initiatives related to DevSecOps and Secure-SDLC.Define and enhance the company’s Secure Software development Lifecycle (Secure-SDLC) which in turn will reflect the company’s Application Development Security Policy,Select and standardize application security tools. This includes vendor/tool assessments and full POC,Integrate Secure-SDLC requirements and other security policy/requirements into the DevSecOps processes,Define and enhance application security requirements and standards which must be designed for agile development methods leveraging traditional application architectures as well as cloud architectures and container workloads.RESPONSIBILITIES:Advise the application security leadership on best practices and standards around application security tools with main focus to unify vulnerability reporting, create predictable CI/CD pipeline processes, and enable application teams to develop new capabilities securely, and free from security defects, by designAssess security tools currently used within the various business Software Development Life Cycle processes to identify business requirements, and rationalize the tools setSelect new application security tools including vendor/tool assessments and conduct full POC to prove that the security solutions/products are fit-for-purpose and fit-for-useDraft documentations for the Secure-SDLC and DevSecOps to illustrate the frameworks and process guidelines to internal customers ensuring the style is palatable and easy to navigateAssess impact of new publications from the security industry (e.g., NIST 800-XXX, ISO 2700X:2022, etc.) on the company’s AppSec programsResearch new trends and advise the application security leaderships on impact of the new trends as they relate to currently used tools, tool chain roadmap, efficiency, and effectiveness of current processes, etc.Standardize code weakness analysis processesPromote the priorities set forth by Global Information Security function, and the roadmap set forth by the Global Application SecurityQUALIFICATIONS:5 years+ DevSecOps and Secure-SDLC work experienceCISSP, CSSLP, cloud security, DevSecOps automation, or similar is requiredPost-secondary education or equivalent experience as a DevSecOps EngineerDevelop/enhance and implement the Secure-SDLC frameworkDesign, implement, and rollout DevSecOps automations and tool chainImplement sensors to collect data on key metrics for statistics and reportingServe as the subject matter expert in Secure-SDLC and DevSecOpsAdvise on the processes and standards that are designed to implement a company’s Application Development Security PolicyExperience in designing Secure-SDLC processes and relevant tooling to support the processesExperience in software/application analysis tools like SAST, DAST, SCA, IAST, RASP, threat modeling, etc.Technical hands-on experience in automating and integrating analysis tools into the DevSecOps pipeline.ADDITIONAL QUALIFICATIONS:Identify application security requirements and brainstorm solutionsAssess the tooling and remediation of threats and vulnerabilities within our software/applications, and the hosting environment ABOUT: Powered by Webbtree