A large healthcare company is seeking an experienced Consultant to join its Secure Development Services team within the Enterprise Information Security organization. This person will help to expand their secure development practices across the organization by working with teams who aren't currently doing code scanning to walk them through the process of establishing that and integrating it into the build phase of their current pipelines and SDLC. They will need to have strong communication skills to work directly with various teams and help to train them. They should also have a background in code scanning, container security, and/or threat modeling.
-3-5+ years experience in code scanning including some combination of: static source code analysis (SCA), static application security testing (SAST), software compliance analysis, opensource scanning, container security, and/or threat modeling
-Prior experience in development with a strong understanding of the SDLC
-Familiarity with CI/CD pipelines
-Strong communication and customer service skills
-Experience driving remediation or performing code reviews
-Programming experience using java, c#, or other scripting or front-end languages
-Experience using Checkmarx for Static Code analysis, Sonatype/NexusIQ for opensource security, and/or Prisma Cloud Twistlock for container security
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.