Senior Security Analyst - Fuze Health

Job Summary

At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments - and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs.

Fuze Health’s foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including Lets Get Checked , Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future.

• Report to the Director of Security Engineering as a key member of the Information Security Team.

• Ensure comprehensive security testing on all company applications by utilizing vendors to conduct tests, and conducting their own security testing.

• Manage testing scheduling and portfolio of multiple company entities.

• Work with teams to perform security testing (including pentesting and architecture reviews) before applications go-live.

• Lead Static Scanning (SAST) service and triage results to advise development teams on remediation areas.

• Write documentation including policies and procedures

• Identify opportunities for improvement / automation.

• Communicate and train our Security Champions as part of effort to shift left

• Work with development teams to remediate and retest items until closure.

• Tracking applications to ensure they have the required level of testing depth and cadence

• Maintain and monitor Web Application Firewall (WAF) events and alerts

• Participate in the on-call roster, including hours outside of normal business

Key Responsibilities

What you’ll work on & what we’re looking for:

• As a security analyst, you’ll be working with team members across the Fuze Health environment in order to ensure that applications are tested and secured - with reviews prior to go-live.
• You’ll need a good understanding of computing / networking / cloud computing
• Problem solving, curiosity, and willingness to learn are key traits
• Be able to demonstrate a working knowledge of the above areas

What you need:

• Comfortable working in a fast-paced environment with excellent communication skills.
• Providing security recommendations on design and application development and coding.
• Strong technical skills in Linux and Windows operating systems, scripting languages like Python. Experience with application and infrastructure security as code.
• You should have ingenuity and strong problem-solving skills in order to swiftly and creatively deal with threats or flaws in networks.
• Candidates should be familiar with agile development processes and have experience integrating secure development practices into agile projects.
• Familiarity with industry standards and regulations including CIS, OWASP, HITRUST, ISO
• BS degree in Computer Science or related field.
• AWS certification at Associate and / or Speciality level preferred.
• Certifications such as OSCP, GWAPT, or GPEN preferred.
• Travel within the US may be required on an irregular basis (minimal travel)
• At least 4 years' relevant experience in the cybersecurity industry.

Additional Physical Job Requirements

Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended…