Senior Security Analyst - Fuze Health

Fuze Health•Remote - California, NV

1d•$128,800 - $161,000•Remote

About The Position

At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments – and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs. Fuze Health’s foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future.

Requirements

Comfortable working in a fast-paced environment with excellent communication skills.
Providing security recommendations on design and application development and coding.
Strong technical skills in Linux and Windows operating systems, scripting languages like Python. Experience with application and infrastructure security as code.
You should have ingenuity and strong problem-solving skills in order to swiftly and creatively deal with threats or flaws in networks.
Candidates should be familiar with agile development processes and have experience integrating secure development practices into agile projects.
Familiarity with industry standards and regulations including CIS, OWASP, HITRUST, ISO
BS degree in Computer Science or related field.
At least 4 years' relevant experience in the cybersecurity industry.

Nice To Haves

AWS certification at Associate and / or Speciality level preferred.
Certifications such as OSCP, GWAPT, or GPEN preferred.

Responsibilities

Report to the Director of Security Engineering as a key member of the Information Security Team.
Ensure comprehensive security testing on all company applications by utilizing vendors to conduct tests, and conducting their own security testing.
Manage testing scheduling and portfolio of multiple company entities.
Work with teams to perform security testing (including pentesting and architecture reviews) before applications go-live.
Lead Static Scanning (SAST) service and triage results to advise development teams on remediation areas.
Write documentation including policies and procedures
Identify opportunities for improvement / automation.
Communicate and train our Security Champions as part of effort to shift left
Work with development teams to remediate and retest items until closure.
Tracking applications to ensure they have the required level of testing depth and cadence
Maintain and monitor Web Application Firewall (WAF) events and alerts
Participate in the on-call roster, including hours outside of normal business

Benefits

dental
vision
multiple group medical plans to choose from
a 401(k) retirement savings plan
group life insurance
accidental death and dismemberment (AD&D) insurance
flexible spending account (FSA)
health savings account (HSA)
commuter benefits
employer-paid short-term (STD) and long-term disability (LTD) insurance
additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program)
flexible vacation time
accrued paid sick time
10 paid holidays
(2 floating holidays for full time non-exempt employees)
eight weeks of paid parental leave for eligible employees
additional paid weeks for the birthing parent
4 weeks paid caregiver leave
a Lifestyle Spending Account allowance each month