Application Security Manager

Job Description

Title:

Application Security Manager

Job#: 3038233

Location:

1 Enterprise Drive, Quincy, MA (Hybrid)

Term: 12+ months

Pay: $64.29/hr

Executive Office of Health and Human Services seeks a Security Manager to ensure the security of the company's infrastructure, networks, data and applications. The Application Security Manager will implement best security practices following the organization’s governance model.

Please reach out to Evan Meltsakos at [email protected] with your resume and a brief introduction to get the conversation started.

• Implement Data Security Management and Operation models.
• Establish various security compliance standards including NIST, FIPS, FedRAMP.
• Engage with agency Privacy and Security office teams to exchange compliance reports and obtain approvals as necessary.
• Involve with auditors as necessary to provide compliance reports and implement mitigation steps.
• Implement process and tools for application vulnerability testing (SAST/DAST).
• Establish and manage vulnerability management including coordination of penetration testing and ongoing remediation, tracking, and compliance reporting.
• Setup requirements for penetration testing and engage with vendors and agencies to perform/report pen tests.
• Setup infrastructure audits and reports with the help of system admins and vendors as necessary.
• Maintain system integrity and security following industry standard IT Controls.
• Implement automation of systems administration and software migration for QA and Production.
• Develop relationships with QA and application teams to establish quality and compliance based on organization standards.
• Provide architecture and configuration recommendations to ensure hosted/deployed environments are secure and best practices compliant.
• Provide technical assistance/recommendations to agency users and other personnel throughout the Commonwealth.
• Evaluate security and audit tools and support them as necessary.
• Identify and troubleshoot problems in all environments and work across teams to resolve them timely.
• Be available for off-hour incidents and provide 24x7 on-call production support on a rotation basis.
• Provide training to teams on security and compliance as necessary.
• Work towards continuous process improvements.

• In-depth knowledge of regulatory frameworks: HIPAA, HITRUST, GDPR, NIST.
• Experience designing and architecting IT and security controls across complex networks and infrastructures.
• Technical aptitude and critical thinking.
• Demonstrated ability to solve complex information security problems and recommend solutions.
• Ability to translate technical risk issues to business leaders and management.
• Excellent verbal, written, and interpersonal communication skills.
• Detail-oriented and values teamwork.
• Problem resolution and situation handling.
• Ability to work a flexible schedule, including evenings, weekends, holidays.

• 10+ years of IT experience with at least 5+ years as a Security Manager or officer.
• Bachelor’s degree in Information Technology, Computer Science, or related field, or equivalent experience.
• Preferred: AWS security and compliance expertise; security certifications such as CISSP, CISA, CISM, CCSP.

A comprehensive benefits package includes medical, dental, vision, life, disability, HSA, 401(k) with employer match after 12 months, ESPP, and employee assistance programs. Professional development resources, certifications, and training are also offered.

Everforth Apex Systems is an equal‑opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex, age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law.