23 hours ago
Irving, TX, USAStaff+
Base Salary
$102k - $179k/yr
Responsibilities
- Serve as the primary technical security partner for the VIP program across discovery, design, development, testing, and deployment.
- Conduct security architecture reviews, threat modeling, technical risk assessments, and security validation activities.
- Translate enterprise security policies into technical requirements, implementation guidance, security guardrails, and reference architectures.
- Evaluate and secure AI-enabled applications involving LLMs, autonomous AI agents, RAG, and enterprise integrations.
- Provide guidance on secure coding, dependency management, secrets management, API security, authentication, authorization, CI/CD, infrastructure as code, and cloud security.
- Review SAST, DAST, SCA, vulnerability management, third-party library, open-source dependency, and software supply chain findings and recommend remediation.
- Assess cloud identity, access management, network segmentation, encryption, containerized workloads, infrastructure automation, and cloud-native services.
- Partner with Application Security, Security Operations, Identity and Access Management, Cloud Security, GRC, Engineering, and Enterprise Architecture teams.
- Develop and improve security standards, technical controls, reusable configurations, secure implementation patterns, and AI security guardrails.
- Communicate technical security risks and recommendations to engineers, architects, product owners, and leadership.
Requirements
- 8+ years of experience in information security engineering, application security, cloud security, or related technical security disciplines.
- Experience working with software engineering and architecture teams to implement security requirements.
- Strong understanding of secure software development, application security vulnerabilities, and common attack techniques.
- Experience with security architecture reviews, threat modeling, technical security risk assessments, and vulnerability management.
- Strong knowledge of authentication, authorization, identity management, encryption, secrets management, and API security.
- Experience securing cloud-based applications and infrastructure.
- Familiarity with CI/CD pipelines, DevSecOps practices, and infrastructure as code.
- Understanding of modern AI architectures and security risks involving LLMs, AI agents, RAG, and enterprise AI integrations.
- Experience interpreting security assessment results and providing actionable remediation guidance.
- Ability to develop technical security standards, reference architectures, and implementation guidance.
- Strong analytical, problem-solving, communication, independent-working, and cross-functional influence skills.
- Preferred: PowerShell, Python, Okta, Entra ID, Splunk, and SIEM experience.
- Preferred: ability to review and read code.
Benefits
- Comprehensive benefits plan.
- Incentive eligible.
- Hybrid work arrangement requiring three days per week in the Irving, TX office.
- In-person interview required.
About Vizient
Vizient provides healthcare performance improvement solutions to U.S. hospitals and health systems, combining a group purchasing organization with clinical, operational, and financial analytics and advisory services. Members access a national contract portfolio representing about $156 billion in annual purchasing volume and benchmarking data drawn from extensive provider networks. Headquartered in Irving, Texas, the privately held company serves more than two-thirds of U.S. acute care providers and acquired Kaufman Hall in 2024.