[Hiring] Senior Security Analyst @Fuze Health

Role Description

As the Senior Security Analyst you will:

• Report to the Director of Security Engineering as a key member of the Information Security Team.
• Ensure comprehensive security testing on all company applications by utilizing vendors to conduct tests, and conducting their own security testing.
• Manage testing scheduling and portfolio of multiple company entities.
• Work with teams to perform security testing (including pentesting and architecture reviews) before applications go-live.
• Lead Static Scanning (SAST) service and triage results to advise development teams on remediation areas.
• Write documentation including policies and procedures.
• Identify opportunities for improvement / automation.
• Communicate and train our Security Champions as part of effort to shift left.
• Work with development teams to remediate and retest items until closure.
• Track applications to ensure they have the required level of testing depth and cadence.
• Maintain and monitor Web Application Firewall (WAF) events and alerts.
• Participate in the on-call roster, including hours outside of normal business.

Qualifications

• Comfortable working in a fast-paced environment with excellent communication skills.
• Providing security recommendations on design and application development and coding.
• Strong technical skills in Linux and Windows operating systems, scripting languages like Python.
• Experience with application and infrastructure security as code.
• Ingenuity and strong problem-solving skills to swiftly and creatively deal with threats or flaws in networks.
• Familiarity with agile development processes and experience integrating secure development practices into agile projects.
• Familiarity with industry standards and regulations including CIS, OWASP, HITRUST, ISO.
• BS degree in Computer Science or related field.
• AWS certification at Associate and/or Specialty level preferred.
• Certifications such as OSCP, GWAPT, or GPEN preferred.
• At least 4 years' relevant experience in the cybersecurity industry.

Requirements

• Travel within the US may be required on an irregular basis (minimal travel).

Benefits

• Full-time employee benefits include: dental, vision, and multiple group medical plans to choose from.
• 401(k) retirement savings plan.
• Group life insurance, accidental death and dismemberment (AD&D) insurance.
• Flexible spending account (FSA) and health savings account (HSA).
• Commuter benefits.
• Employer-paid short-term (STD) and long-term disability (LTD) insurance.
• Additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program).
• Flexible vacation time, accrued paid sick time, 10 paid holidays, and 2 floating holidays for full-time non-exempt employees.
• Eight weeks of paid parental leave for eligible employees, additional paid weeks for the birthing parent, and 4 weeks paid caregiver leave.
• A Lifestyle Spending Account allowance each month.