Company Overview
At Memorial Sloan Kettering (MSK), we're not only changing the way we treat cancer, but also the way the world thinks about it. By working together and pushing forward with innovation and discovery, we're driving excellence and improving outcomes. We're treating cancer, one patient at a time. Join us and make a difference every day.
MSK requires all new hires, volunteers, and vendors who come onsite to provide proof of COVID-19 vaccination. This is based on the COVID-19 vaccines' high level of protection and our shared responsibility in protecting our patients.
Beginning on February 21, 2022, MSK will require all new hires, volunteers, and vendors who come onsite to provide proof of complete COVID-19 vaccination series + booster (once eligible). Individuals currently eligible for a COVID-19 booster must get their booster, or have an approved exemption as a condition of employment at MSK. Individuals can get their COVID-19 booster 5 months after receiving their second dose of either the Pfizer-BioNTech or Moderna COVID-19 vaccine, or 2 months after the Johnson & Johnson vaccine. Individuals who are not yet eligible for a booster must meet this criteria within 30 days of becoming eligible.
Job Description
We Are:
We are seeking a Security Engineer specializing in secure coding to take the help MSK take our next steps in refining our DevSecOps pipeline. The ideal candidate will have a proven ability to partner with application developers and code pipeline teams in order to build, deploy, and support automation and security tools into the DevOps pipeline. The candidate will also work closely with developers in order to champion secure coding practices and methodology.
You Will:

• Design, develop, deploy and maintain an ecosystem of security tools, systems and frameworks that will allow development teams to weave security controls into their SDLC.
• Act as a subject matter expert in the field of secure code for both developers as well as other Information Security teams.
• Assist in building CI/CD pipelines using industry-standard tool sets.
• Manage the integration of security scanning tools (SAST, DAST, IAST, etc) tools into code pipelines.
• Train and coach developers on how to secure-by-design and secure-by-default into standard working practices and the daily workflows of developers.
• Develop continuous monitoring and metrics for security tools in DevOps pipelines and integrate these metrics with the overall risk framework for the hospital.

You Need:

• Proven experience in security engineering, DevOps or pipeline development
• Experience with deployment of one or more of the security tools commonly used in development pipelines e.g. SAST, DAST or IAST tools
• Experience developing in at least one programming language e.g. Python, JavaScript
• Ability to communicate effectively to different partners (senior management, peers, junior colleagues, external teams using our platform)
• Practical experience with at least one cloud platform e.g. AWS, Azure
• Experience working in an Agile environment / with Agile development methodologies

Benefits
Competitive compensation packages | Sick Time |Generous Vacation+ 12 holidays to recharge & refuel| Internal Career Mobility & Performance Consulting | Medical, Dental, Vision, FSA & Dependent Care|403b Retirement Savings Plan Match|Tuition Reimbursement |Parental Leave & Adoption Assistance |Commuter Spending Account |Fitness Discounts &Wellness Program | Resource Networks| Life Insurance & Disability | Remote Flexibility
We believe in communication, openness, and thinking beyond your 8-hour day @ MSK. It's important to us that you have a sense of impact, community, and work/life balance to be and feel your best.
#LI-POST
Closing
MSK is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status or any other factor which cannot lawfully be used as a basis for an employment decision.
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.