Position Summary

BMS is seeking a Cybersecurity Specialist I - Application Security with 2+ years of experience in DevSecOps or a related security role. This role will support automated security testing in CI/CD pipelines, perform first-level review of application security findings, and work with senior team members and developers to improve secure software delivery.

Key Responsibilities

· Support the integration and operation of automated security checks in CI/CD pipelines.

· Run SAST, SCA and DAST scans, perform first-level triage, and track remediation with development teams.

· Help onboard applications and repositories to security tools and maintain scanner configurations and integrations.

· Work with developers to reproduce findings, understand root causes and apply secure coding guidance.

· Maintain clear documentation, operational procedures and vulnerability reporting.

· Develop basic automation using Python, Bash or similar scripting languages and integrate tools through REST APIs.

· Participate in secure coding awareness, threat modeling and application security improvement activities under senior guidance.

· Escalate complex or high-risk findings with clear supporting information.

Required Qualifications and Experience

· 2+ years of experience in DevSecOps, security-focused DevOps, application security or a related role.

· Working knowledge of CI/CD pipelines and source control platforms such as GitHub.

· Foundational understanding of SAST, SCA, DAST, OWASP Top 10 and common application vulnerabilities.

· Basic scripting skills in Python, Bash or a similar language.

· Ability to analyze technical findings, document work clearly and collaborate with engineering teams.

· Strong willingness to build deeper application security skills.

Preferred Qualifications

· Exposure to application security scanning tools or AI-assisted code scanning.

· Familiarity with REST APIs, containerized development or modern software delivery workflows.

· Relevant certification or training such as Security+, GitHub Actions or equivalent.

Core Competencies

· Learning agility and technical curiosity

· Attention to detail and structured problem solving

· Teamwork and service orientation

· Accountability and clear communication

Position Summary

BMS is seeking a Cybersecurity Specialist I - Application Security with 2+ years of experience in DevSecOps or a related security role. This role will support automated security testing in CI/CD pipelines, perform first-level review of application security findings, and work with senior team members and developers to improve secure software delivery.

Key Responsibilities

· Support the integration and operation of automated security checks in CI/CD pipelines.

· Run SAST, SCA and DAST scans, perform first-level triage, and track remediation with development teams.

· Help onboard applications and repositories to security tools and maintain scanner configurations and integrations.

· Work with developers to reproduce findings, understand root causes and apply secure coding guidance.

· Maintain clear documentation, operational procedures and vulnerability reporting.

· Develop basic automation using Python, Bash or similar scripting languages and integrate tools through REST APIs.

· Participate in secure coding awareness, threat modeling and application security improvement activities under senior guidance.

· Escalate complex or high-risk findings with clear supporting information.

Required Qualifications and Experience

· 2+ years of experience in DevSecOps, security-focused DevOps, application security or a related role.

· Working knowledge of CI/CD pipelines and source control platforms such as GitHub.

· Foundational understanding of SAST, SCA, DAST, OWASP Top 10 and common application vulnerabilities.

· Basic scripting skills in Python, Bash or a similar language.

· Ability to analyze technical findings, document work clearly and collaborate with engineering teams.

· Strong willingness to build deeper application security skills.

Preferred Qualifications

· Exposure to application security scanning tools or AI-assisted code scanning.

· Familiarity with REST APIs, containerized development or modern software delivery workflows.

· Relevant certification or training such as Security+, GitHub Actions or equivalent.

Core Competencies

· Learning agility and technical curiosity

· Attention to detail and structured problem solving

· Teamwork and service orientation

· Accountability and clear communication