Position: Application Security and Privacy Engineer
Company: GlobalLogic
Category: Security
Experience required: 5y
English level: upper

A customer is a healthcare IT security company. It provides healthcare companies with a platform that addresses critical compliance and security challenges. It helps to improve providers productivity.

Requirements:
Minimum of a Bachelor’s degree in Cybersecurity, Privacy, Computer Science or related discipline
2-5 years of relevant security and privacy experience
Experience with industry security, privacy, and compliance standards
Experience with security and privacy tools
Excellent written and verbal communication skills, and the ability to interact well with both internal teams and external vendors
Cyber security (CSSLP, CISSP, CISM, CompTIA, etc.) or privacy (CIPP, CIPM, etc.) certifications desired
Strong network of security and privacy professionals that can be used for quick discussions and consultation related to best practices and cultural changes

Job Responsibilities:
Lead application security and privacy initiatives and drive security best practices
Implement and manage application security and privacy tools. Become an SME for the tools and work with product teams to ensure tool use and issue resolution
Coordinate regular Application Security and Privacy Team meetings including application security and privacy information sharing and tracking of application security team initiatives
Raise the visibility of application security and privacy through the product organization. This includes metrics collection, analytics, dashboards, and presentations
Increase the overall application security and privacy knowledge in the organization through coordination of training activities such as article distribution, lunch-and-learns and participation in product team security and privacy activities
Participate in the product incident response process. Bringing industry expertise and best practices
Participate in product threat modeling exercises
Coordinate internal and external penetration testing
Contribute to application security and privacy testing through coordination and raising awareness with product quality teams