CI/CD Security Integration jobs

Lead product threat modeling activities and maintain cybersecurity architecture, drive secure development practices, oversee security validation activities, and support global regulatory and post-market cybersecurity requirements for medical device products deployed in clinical environments.

Compensation

Medtronic offers a competitive Salary and flexible Benefits Package

Responsibilities

Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third-party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third-party component inventories, and vulnerability monitoring activities.

Requirements

Bachelor's degree
Nice to have: regulated medical devices under IEC 62304, ISO 14971, ISO 13485, IEC 81001-5-1, or AAMI TIR57 requirements
Nice to have: FDA cybersecurity submissions
Nice to have: DICOM
Nice to have: PACS

Principal Product Security Engineer

Medtronic · Posted Nov 8, 2026

Open

Kfar Saba, Central District, Israel
On-site
Full-time · Senior
7+ years

Apply with RefersoAI Apply on careers page

Lead and own the cybersecurity of the CathWorks platform medical device, ensuring secure development, hardening, verification, and post‑market vulnerability management.

Compensation

Medtronic offers a competitive Salary and flexible Benefits Package

Responsibilities

Lead product threat modeling activities and maintain cybersecurity architecture, attack analyses, and security risk assessments throughout the product lifecycle.
Define security requirements and conduct design reviews for software features, system integrations, and third‑party components.
Establish and maintain secure Windows platform configurations, including operating system hardening, application control, secure boot, encryption, and access management.
Integrate cybersecurity requirements into the software development lifecycle through secure coding practices, security testing, vulnerability scanning, and CI/CD security controls.
Manage Software Bill of Materials (SBOM) processes, third‑party component inventories, and vulnerability monitoring activities.

Requirements

Bachelor's degree
Nice to have: regulated medical devices IEC 62304
Nice to have: ISO 14971
Nice to have: ISO 13485
Nice to have: IEC 81001-5-1

Skills

Windows security technologies

Associate Director - Application Security

S&P Global · Posted Nov 6, 2026

Open

New York, New York, United States
On-site
Full-time · Director
$130K–$190K per year
6+ years

Apply with RefersoAI Apply on careers page

Lead complex application security assessments, drive integration of security controls into developer workflows, and design AI-enabled Application Security capabilities.

Compensation

anticipated base salary range for this position is $130 000 to $190 000

Responsibilities

Lead complex application security assessments across multiple testing methodologies including SAST, SCA, DAST, API security, secrets detection, and threat modeling.
Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms.
Perform comprehensive threat modeling and security design reviews for new applications, APIs, and cloud services.
Design and implement AI-enabled Application Security capabilities including custom tools, agents, and automations.
Partner with cross-functional teams including engineering, product, cloud, and risk stakeholders to resolve systemic application risks.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, or Engineering.
Nice to have: Model Context Protocol (MCP)
Nice to have: AI agents
Nice to have: agentic architectures
Nice to have: tool calling

Skills

Application Security DevSecOps

Cyber Security Product Owner / Business Analyst

Applab Systems Inc · Posted Nov 5, 2026

Open

Remote, United States
Remote
Contract

Apply with RefersoAI Apply on careers page

Act as bridge between business units, application teams, and cyber security team to assess and improve security capabilities.

Responsibilities

Assess implementation and coverage of SAST, DAST, Container Security, PKI, and Secrets Management
Identify and document coverage, integration, process, and capability gaps
Gather requirements from application teams and translate gaps into clear requirements for the AppSec team
Track requirements and improvements through a prioritized backlog
Develop and maintain clear, easy-to-use Service Offering Catalogs for key security services

Skills

Product Owner Product Manager Technical Business Analyst Security Consultant SAST DAST Container Security PKI Secrets Management

Cyber Security Product Owner / Business Analyst

Diverse Lynx · Posted Nov 5, 2026

Open

Maimi, FL
$45–$45 per hour

Apply with RefersoAI Apply on careers page

Act as the bridge between Business units Application Teams, BISOs, and the Cyber Security team, focusing on understanding current implementation and coverage of key security capabilities, identifying gaps, developing clear service offerings, and driving improvement across Business Units.

Compensation

pay Rate: $45/Hr

Responsibilities

Capability Mapping & Gap Analysis
Assess the implementation and coverage of SAST, DAST, Container Security, PKI, and Secrets Management across applications and Business Units.
Identify and document coverage, integration, process, and capability gaps.
Gather requirements from application teams and translate gaps into clear requirements for the AppSec team.
Track requirements and improvements through a prioritized backlog.

Skills

Product Owner Product Manager Technical Business Analyst Security Consultant SAST DAST Container Security

Vulnerability Management Lead

Diverse Lynx India · Posted Nov 5, 2026

Open

India
Hybrid
5–10 years

Apply with RefersoAI Apply on careers page

Lead end-to-end Vulnerability Management activities for web applications and IT infrastructure.

Responsibilities

Lead end-to-end Vulnerability Management activities for web applications and IT infrastructure
Conduct and coordinate Infrastructure Penetration Testing for identified IPs on a quarterly basis
Perform Application Penetration Testing before UAT Go-Live and provide remediation recommendations
Integrate and manage DevSecOps security controls within CI/CD pipelines
Implement and monitor SAST, DAST, and SCA security scanning tools

Requirements

Nice to have: OWASP Top 10
Nice to have: Secure SDLC
Nice to have: Threat Modeling
Nice to have: Security Automation
Nice to have: Cloud Security (Azure/AWS)

Skills

Vulnerability Management Application Security (AppSec)DevSecOps Application Penetration Testing (Web Application PT)Infrastructure Penetration Testing (Infra PT)

Cyber Security Engineer

qlub · Posted Nov 5, 2026

Open

Colombo, Western Province, Sri Lanka
3+ years

Apply with RefersoAI Apply on careers page

Cybersecurity Engineer responsible for security compliance, audits, and threat detection across qlub’s payment platform.

Responsibilities

Own day‑to‑day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
Coordinate third‑party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.

Requirements

Bachelor’s degree in Information Security, Computer Science or a related field
Nice to have: fintech
Nice to have: payments
Nice to have: cloud-based SaaS environments
Nice to have: UAE IA/NESA

Skills

ISO 27001 PCI DSS SOC 2