Information Security Development Engineer

ITAC SOLUTIONS
Birmingham, AL, United States
12 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
$99,840.0 - $114,400.0
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Application Programming Interfaces (APIs) Cyber Security Identity and Access Management Information Systems Security Architecture Professional Key Management Systems Development Life Cycle Software Engineering Cloudformation Kubernetes Infrastructure Automation Frameworks Bicep
+3 more
Terraform Static Application Security Testing Dynamic Application Security Testing

Job description

  • Design, implement, and maintain secure CI/CD pipelines across applications, APIs, and cloud platforms
  • Develop and manage infrastructure as code with security-first principles
  • Integrate automated security testing (SAST, DAST, dependency, container scanning) into the SDLC
  • Embed threat modeling and security review gates into engineering workflows
  • Monitor, detect, and respond to security vulnerabilities and incidents
  • Support regulatory compliance and contribute to audits and control implementation
  • Perform risk assessments and security architecture reviews across internal and vendor systems

Requirements

  • Experience with healthcare regulatory frameworks (HIPAA, HITECH, CMS)
  • Hands-on experience with Infrastructure as Code tools (Terraform, CloudFormation, ARM/Bicep)
  • Proficiency with SAST/DAST, dependency/container scanning, and cloud security posture management
  • Solid understanding of IAM, encryption, key management, and secure architecture principles
  • Relevant security certifications such as CSSLP, GSSP, Security+, or SSCP (preferred)
  • Experience with Kubernetes and container security (preferred)

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:56 min

Provisioning a secure container infrastructure with Bicep

Matthias Falkenberg +1 · World Congress 2022

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · World Congress 2022

1:34 min

Essential commands for running and testing Terraform configurations

Hennie Francis · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · World Congress 2022

Videos

See all

Related articles

See all