Information Protection Advisor

What you'll do

• Design and implement automated security solutions within CI/CD pipelines.
• Integrate and optimize SAST, DAST, SCA, and MAST tools across development environments.
• Lead security assessments, threat modeling, and vulnerability analysis to identify risks.
• Develop reusable security services, tooling, and automation frameworks for DevSecOps.
• Influence secure architecture decisions for modern applications and platforms.
• Provide expert guidance to engineering teams on secure development practices.
• Ensure alignment with regulatory and compliance requirements like HIPAA, PCI-DSS, and GDPR.
• Improve security operational efficiency and cost optimization across application environments.

What we're looking for

• 5+ years of experience in cybersecurity, with a focus on application or product security.
• Proven experience integrating and automating security tools in CI/CD pipelines.
• Strong understanding of secure software development principles and modern SDLC practices.
• Hands-on experience with application security testing tools (SAST, DAST, SCA, MAST).
• Experience designing and implementing security solutions across complex development environments.
• Familiarity with cloud platforms (AWS, Azure, or Google Cloud) and securing cloud-native applications.
• Demonstrated ability to work effectively in Agile environments.
• Proficiency in scripting or programming languages such as Python, Java, or Shell (preferred).