Software Security Analyst

Job summary

The Software Security Analyst will develop, maintain, and deploy platform components while focusing on secure data transmission and operational best practices. They will collaborate with cross-functional teams to implement DevSecOps tools, perform code reviews, and resolve production issues.

Job details

VeroSource is currently seeking a Software Security Analyst to join our team in our Fredericton office. The successful candidate will use their expertise to build and maintain components of the VS Platform, focusing on the secure transmission of healthcare data between front-end, back-end, and legacy systems ensuring performance, compliance, security and interoperability across environments. The successful candidate will work closely with other members of the Platform, QA, and Operations teams to deliver high-quality, maintainable software and ensure their secure operation. They will focus on implementation of security and operations best practices and apply strong technical skills, problem-solving abilities, security expertise and attention to detail in every stage of the development lifecycle. The Software Security Analyst plays a key role in supporting VeroSource’s mission to enable secure, connected, and accessible healthcare through technology, contributing to the ongoing growth of the VS Platform. Job Responsibilities include, but are not limited to: Develop, maintain, and deploy VS Platform components, including: REST APIs Data access layers Business logic Security modules Collaborate in an Agile environment using DevOps tools (GitLab, etc.) to manage feature development, bug fixes, and product enhancements Develop DevOps tools such as CI pipelines and security scanning processes Participate in code reviews, testing, and documentation of requirements Continuously improve code quality, maintainability, and performance Participate in operations tasks such as deployments, maintenance and infrastructure improvements Support operational and application security improvements Support and implement improved DevSecOps tooling and practices Adapt quickly to new technologies and contribute to innovation across the platform Provide support to quickly resolve production issues when they arise Participate in the support team rotation, including holding the support phone and responding to support issues during assigned rotation periods Requirements Degree or diploma in Computer Science/Engineering 3+ years of experience in software development Understanding of solid software design and development principles Relational Database design and development Standard web stack (HTML5, JavaScript, CSS, jQuery) DevOps tools (GitLab, GitHub, etc.) Docker Experience with Microservices concepts, REST APIs, JSON Ability to work in a fast-paced environment Experience with Cloud Service Providers such as Amazon AWS and Microsoft Azure Nice to have (but not required): Kubernetes experience Interest or experience in Application Security Experience with enterprise security tools and practices Terraform experience Digital Health Experience Experience with React applications Experience working with authentication and/or authorization protocols (e.g. OAuth2, OpenID Connect, SAML) Golang Java, Spring Boot, JPA BASH shell and scripting

What you’ll do

The Software Security Analyst will develop, maintain, and deploy platform components while focusing on secure data transmission and operational best practices. They will collaborate with cross-functional teams to implement DevSecOps tools, perform code reviews, and resolve production issues.

Requirements

Candidates must hold a degree or diploma in Computer Science or Engineering with at least 3 years of software development experience. Proficiency in web technologies, relational database design, and DevOps tools is required, along with an understanding of secure software design principles.

Listed skills

• Microsoft Azure · Preferred
• HTML · Preferred
• REST APIs · Preferred
• CI/CD · Preferred
• Docker · Preferred
• JavaScript · Preferred
• Amazon Web Services · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Software Development
• REST APIs
• DevOps
• GitLab
• Docker
• Microservices
• JSON
• Cloud Computing
• AWS
• Azure
• Security Scanning
• CI/CD
• Relational Databases
• HTML5
• JavaScript
• Application Security
• Relational Database Design
• DevSecOps
• Pipelines
• Cloud Services
• Back End (Software Engineering)
• Digital Health Technologies
• Software Security
• Go (Programming Language)
• Data Access
• JavaScript (Programming Language)
• Agile Methodology
• Amazon Web Services
• Business Logic
• Authentications
• Microsoft Azure
• Bash (Scripting Language)
• Cascading Style Sheets (CSS)
• Code Review
• Computer Science
• Enterprise Security
• Github
• Innovation
• Interoperability
• Problem Solving
• Jakarta Persistence API
• Spring Framework
• JQuery
• OAuth
• OpenID
• Operations
• RESTful API
• Safety Assurance
• Security Assertion Markup Language (SAML)
• Software Design

Job areas

• Technology
• Software
• Security & Safety
• Healthcare
• Engineering
• Software Security Architect
• Technical Consultant / Analyst
• Systems Analysts
• Computer Occupations, All Other