We currently have a full-time job opening for 'Specialist - Application Security'
Department overview:
The Information Security organization is on a tremendous growth journey. We aim to be a world-class cybersecurity organization that enables Cardinal Health to be healthcare’s most trusted partner. We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empowering talented engineers who mentor and uplift others, led by leaders with a maniacal focus on employee development and well-being, dedicated training programs, and a fun, collaborative atmosphere.
As a part of our growth, we are investing heavily in Application Security to enable the enterprise to deliver products and services to our customers with security in mind. Traditionally Application Security was a function of Security Architecture. This new team’s sole function is dedicated to Application Security and is being created to reflect its importance to our organization.
Job Overview:
The Application Security Engineer is a foundational member of the new Application Security team at Cardinal Health. This role will utilize one's Software Development experience to serve Cardinal Health's best interests by balancing security with software delivery.
Responsibilities include the following:
Support the implementation and configuration of application security tools
Partnering with application teams to assist with remediation of security gapsAssist in monitoring organizational compliance with Application Security standardsSupport the evaluation of new technologies and programming practices to facilitate application team secure adoption across the enterpriseSupport ingesting application logs into SIEM and application monitoring and alerting systems to help build detections indicating possible application attacks and resiliency issuesAssisting the Incident Response team on application security investigations, where neededCollaborating across Information Security to advocate for Application SecurityBuilding custom tooling when none exists to enable software teams to embed security into their processesExecuting on the Application Security roadmap with the guidance of senior technical leaders
Qualifications:
Required QualificationsProven experience with one or more of the following development languages/platforms: Java, JavaScript, .NET/C#, Python, PHP/Laravel or CodeIngnitor5yrs-8yrs of relevant experience
Preferred Qualifications
Familiarity with Application Security conceptsUnderstanding or previous experience in one or more of the following preferred: SDLC and DevSecOps concepts such as CI/CD pipelinesAgile development concepts and methods such as Scrum or KanbanContainer concepts and technologies, including Docker and KubernetesOWASP Top 10Static or Dynamic code scanning and subsequent remediationsCommon application security controls, including WAFCommon patterns for AuthN and AuthZExperience in understanding the SCA/SAST/DAST Scanning process.Experience in understanding the scan results and share the tools agnostics to the application teams.Experience in creating dashboards and guide the application teams through the remediation process.Experience in Veracode a Plus.Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.
Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.
Apply