Information Protection Advisor

What you'll do

• Embed security assessments into development and operational workflows to ensure continuous compliance.
• Provide in-depth technical analysis of security requirements for all processed, stored, and transmitted information.
• Collaborate with engineering teams to ensure secure design and implementation throughout the system lifecycle.
• Conduct comprehensive security assessments of third-party service providers and outsourced solutions.
• Design and implement automated security processes to enhance the efficiency of security controls.
• Evaluate third-party security postures for alignment with organizational standards and supply chain risk considerations.
• Integrate security technologies like Checkmarx, BlackDuck, and PrismaCloud into CI/CD pipelines.
• Manage vulnerabilities and perform false positive triage automation using Python-based bots and Ansible.

What we're looking for

• Bachelor’s degree in Computer Science or a related field.
• 2 years of experience in the field.
• Experience automating security solutions in a CI/CD pipeline.
• Experience integrating technologies including Checkmarx, BlackDuck, and NowSecure via scripts and triggers.
• Experience with SAST using Checkmarx and DAST using RedHat ACS, BlackDuck, and PrismaCloud.
• Experience with application security posture management using Apiiro and SBOM evaluation.
• Proficiency with Python-based bots, Ansible playbooks, and CI/CD tools like Azure DevOps and Jenkins.
• Experience with Docker container security, authentication/authorization design, and vulnerability management.