Security Engineer

• - Implement and operate security technologies (SAST, DAST, SCA, API, container, and cloud security posture management).
• - Support the implementation and optimization of security engineering processes and tools.
• - Collaborate with Development and DevOps teams to integrate security into the software development lifecycle (SDLC) and CI/CD pipelines.
• - Manage the application vulnerability lifecycle. Oversee the entire process of handling application vulnerabilities from receiving vulnerability reports to tracking resolution.
• - Assist with conducting penetration testing and vulnerability assessments; assist in identifying and remediating security issues.
• - Act as the main point of contact for external service providers related to vulnerability management and penetration testing, ensuring smooth communication and collaboration.
• - Coordinate with stakeholders to develop and implement action plans and maintain milestone tracking until completion.
• - Participate in threat modeling and risk assessments for business systems.
• - Assist with incident response activities and root cause analysis for security events.
• - Work closely with senior engineers, product managers, and other stakeholders to ensure security best practices are followed.
• - Communicate findings and recommendations effectively to technical and non-technical audiences.
• - Contribute to security documentation, standards, and training initiatives.
• - Stay current with the latest security trends, threats, and technologies.
• - Participate in ongoing learning and professional development in product security and cloud-native security.

Application Security Engineer, Product Security

Senior Manager, Security Risk & Compliance

Lead Security Engineer

Security Consultant II

Senior Network Security Engineer

Managing Principal, Healthcare Cybersecurity, Compliance Consulting