aici cdsastcybersecuritydastscaapplication securitysecure sdlc
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
83
Хорошая вакансия
развернуть
Понятные задачи начального уровня и наставничество дают хорошую возможность развиваться в AppSec, но необходимость выездов на площадки добавляет неопределенности.
Нужны выезды
Актуальные инструменты
Понятный уровень
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Application Security Engineer I, Cybersecurity (SAST/DAST/SCA): Supporting application security assessments by analyzing source code, identifying and verifying vulnerabilities, and integrating security into the SDLC with an accent on supervised use of security tooling and basic automation. Focus on documenting findings, tracking remediation, contributing to CI/CD integration, and collaborating with development and operations teams.
Location: Remote nationwide within the United States; must reside in and be authorized to work in the United States. Travel to and work onsite at client, temporary, or corporate office locations may be required as business needs require.
Salary: $84,000–$126,000 annually, based on experience.
Company
hirify.global provides technology-enabled revenue cycle management and point solutions for hospitals and affiliated physician groups across the United States.
What you will do
Analyze source code for secure coding practices and use SAST, DAST, and SCA tools under supervision.
Verify tool results, document findings, and generate basic security reports and summaries.
Log and track security issues in ticketing systems and support remediation with development teams.
Support secure SDLC practices, CI/CD integration, and basic security automation with developers and operations.
Participate in secure code and design reviews as a learner.
Contribute to security awareness and training efforts.
Requirements
Foundational understanding of security tools and vulnerabilities, with basic scripting or programming knowledge.
Familiarity with network, application, and system security vulnerabilities.
Proficiency in scripting and programming languages relevant to security tasks.
Ability to follow procedures, analyze basic security issues, and identify security vulnerabilities with attention to detail.
Clear written and verbal communication, including the ability to convey security issues to non-technical stakeholders.
Ability to work effectively in a team, receive feedback and mentorship, and collaborate with a remotely located team potentially spanning multiple time zones.
Curiosity and commitment to developing cybersecurity skills; must be inquisitive and open to innovation, including AI.
Must reside in and be authorized to work within the United States; applications from outside the United States will not be considered.
Culture & Benefits
Remote work with required onsite travel or work at client, temporary, or corporate locations as business needs require.
Culture focused on collaboration, growth, innovation, customer obsession, and continuous learning.
Healthcare, time off, retirement, and well-being benefits.
Professional certification relevant to the associate’s field and tuition reimbursement.
Quarterly and annual incentive programs, plus work-life flexibility.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →