Possess a strong understanding of HL7 and experience working with it in the healthcare domain.
Work Experience
Required Skills
Bachelor’s degree in computer science, Information Security, or a related field.
7+ years full-time information security experience.
Good understanding of security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)
Sound understanding of security technologies/techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware/embedded authentication, OAuth, 2-factor authentication, white-box code analysis.
Experience with a range of security tools related to SAST (Static Application Security Assessment), DAST (Dynamic Application Security Assessment), Vulnerability Management, SCA (Software Composition Analysis), Penetration Testing, Threat Modelling Tool
Firm with knowledge of OWASP, CVSS, FIPS 140-2/140-3 and DoD RMF.
Experience in working with Product sector environment.
Experience in handling security assessment of Kubernetes, Microservice based architecture.
Strong understanding of secure coding practices, including experience with C++, Java, Go and Python
Excellent communication skills, both written and verbal, and the ability to effectively communicate security information to both technical and non-technical stakeholders.
Strong problem-solving and analytical skills, and the ability to think critically and creatively.
Ability to work effectively in a fast-paced and dynamic environment, and to prioritize and manage multiple tasks and projects.
Experience in working with Agile.
Good communication and presentation skills.
Desired Skills
Experience in Healthcare domain.
Penetration Testing in Web Application, Thick Client, Mobile Application, REST/SOAP
Infrastructure Penetration Testing
Experience in Red Teaming Activities (add on)
Recognition for CVE or Wall-of-Fame though Bug-Bounty (add on)
Experience in developing software applications for Medical Devices domain CT, XR, MR, Common Platform, DICOM standard and IHE standards.
Cybersecurity certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar certifications are desirable.
Ability to explore large code base and understand architecture and design
