Cybersecurity Specialist I – Application Security
Bristol Myers SquibbResponsibilities
- Support automated security checks in CI/CD pipelines.
- Run SAST, SCA, and DAST scans; perform first-level triage and track remediation with development teams.
- Onboard applications and repositories to security tools and maintain scanner configurations and integrations.
- Reproduce findings with developers, identify root causes, and apply secure coding guidance.
- Maintain documentation, operational procedures, and vulnerability reports.
- Develop basic automation using Python, Bash, or similar scripting languages and integrate tools through REST APIs.
- Participate in secure coding awareness, threat modeling, and application security improvement activities under senior guidance.
- Escalate complex or high-risk findings with supporting information.
Requirements
- At least 2 years of experience in DevSecOps, security-focused DevOps, application security, or a related role.
- Working knowledge of CI/CD pipelines and source control platforms such as GitHub.
- Foundational understanding of SAST, SCA, DAST, OWASP Top 10, and common application vulnerabilities.
- Basic scripting skills in Python, Bash, or a similar language.
- Ability to analyze technical findings, document work clearly, and collaborate with engineering teams.
- Willingness to build deeper application security skills.
- Preferred: exposure to application security scanning tools or AI-assisted code scanning.
- Preferred: familiarity with REST APIs, containerized development, or modern software delivery workflows.
- Preferred: relevant certification or training such as Security+, GitHub Actions, or equivalent.
Benefits
- Purpose-driven work supporting the development of innovative medicines and patient outcomes.
- Supportive, inclusive culture with opportunities for growth, wellbeing, flexibility, and comprehensive benefits.
- Work models include site-essential, site-by-design, field-based, and remote-by-design; the assigned model depends on the role's core responsibilities.
- Reasonable workplace accommodations and ongoing support are available for applicants and employees with disabilities.
About Bristol Myers Squibb
At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds in biopharma, collaborating with a team rich in diversity of experiences, and perspectives. We have built a sustainable pipeline of potential therapies and are leveraging translational medicine and data analytics to understand how we can deliver the right medicine to the right patient, at the right time, to achieve the best outcome. Whether in a scientific, business or supporting function, a career at BMS means you’ll be inspired every day to grow and thrive through opportunities that are uncommon in scale and scope. Here, you’ll be on the cutting edge of powerful innovation in oncology, hematology, immunology, cardiovascular disease, and fibrosis, with colleagues united in the mission to help patients. Through the Bristol Myers Squibb Foundation, we also promote health equity and seek to improve health outcomes of populations disproportionately affected by serious diseases and conditions. Our mission is to give new hope to help patients prevail over serious disease – it drives everything we do. Review our Social Media Community Guidelines at: https://www.bms.com/social-media-community-guidelines.html