Information Security Specialist

What you'll do

• Perform cloud application security risk assessments for mission-critical systems and workloads.
• Conduct application security testing to ensure only compliant workloads move to the cloud.
• Embed within development squads to provide real-time security advice during the development process.
• Integrate security tooling into the CI/CD pipeline as part of DevSecOps methodologies.
• Review application code to assist developers with vulnerability remediation and contextualization.
• Evaluate third-party vendors, SaaS solutions, and Gen AI systems for data protection risks.
• Manage risk assessments based on NIST 800-53 standards to inform business strategies.
• Resolve security findings promptly within an agile management practice.

What we're looking for

• Background in application development with a focus on security control implementation.
• Ability to review application code and provide guidance on vulnerability remediation.
• Experience performing risk assessments in the cloud and against third-party SaaS solutions.
• Knowledge of risk management based on NIST 800-53 standards.
• Experience working within DevSecOps cultures and agile environments to deliver business value.
• Ability to perform application security testing for CI/CD pipelines.
• Proven ability to evaluate and secure Gen AI systems with internal and embedded models.
• Must possess or be able to obtain a National Security Clearance, which requires U.S. citizenship.