Cybersecurity Specialist II - Application Security
Bristol Myers SquibbResponsibilities
- Implement and operate SAST, SCA, and DAST tools across application development workflows.
- Review and validate security findings, reduce false positives, assess risk, and provide practical remediation guidance.
- Integrate automated security checks into CI/CD pipelines and support developer feedback and quality gates.
- Operate AI-assisted code scanning and improve the quality of its results.
- Support application and API security assessments, including targeted manual testing.
- Track vulnerabilities through remediation and support reporting, exception, and risk-acceptance processes.
- Develop scripts and REST API integrations using Python, Java, or similar languages to automate scanning and reporting.
- Use CNAPP tools such as Wiz.io to assess and mitigate code and cloud vulnerabilities across AWS, Azure, and GCP.
- Contribute to secure coding guidance, threat modeling, standards, developer enablement, and application security governance.
Requirements
- At least 4 years of hands-on experience in application security, secure SDLC, or DevSecOps.
- Practical experience operating SAST, SCA, and DAST tools and performing vulnerability triage.
- Working knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
- Coding or scripting ability in Python, Java, or a similar language, including developing proof-of-concept exploits and automated multi-stage attack-chain tools.
- Experience with CI/CD pipelines, source control platforms, and security automation.
- Experience with cloud security services and mitigating cloud and code vulnerabilities in AWS, Azure, and GCP environments.
- Ability to communicate clear remediation guidance and collaborate with development teams.
- Preferred experience with AI-assisted code scanning, penetration testing or manual application security testing, REST APIs, and GitHub or a comparable platform.
- Relevant certifications such as CSSLP, GWAPT, CEH, Security+, or equivalent are preferred.
Benefits
- Comprehensive benefits, wellbeing support, inclusion, flexibility, and opportunities for growth are offered.
- The role follows one of BMS's work models: site-essential, site-by-design, field-based, or remote-by-design, with the assigned model based on core responsibilities.
About Bristol Myers Squibb
At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds in biopharma, collaborating with a team rich in diversity of experiences, and perspectives. We have built a sustainable pipeline of potential therapies and are leveraging translational medicine and data analytics to understand how we can deliver the right medicine to the right patient, at the right time, to achieve the best outcome. Whether in a scientific, business or supporting function, a career at BMS means you’ll be inspired every day to grow and thrive through opportunities that are uncommon in scale and scope. Here, you’ll be on the cutting edge of powerful innovation in oncology, hematology, immunology, cardiovascular disease, and fibrosis, with colleagues united in the mission to help patients. Through the Bristol Myers Squibb Foundation, we also promote health equity and seek to improve health outcomes of populations disproportionately affected by serious diseases and conditions. Our mission is to give new hope to help patients prevail over serious disease – it drives everything we do. Review our Social Media Community Guidelines at: https://www.bms.com/social-media-community-guidelines.html