Overview

Position SummaryBMS is seeking a Cybersecurity Specialist I - Application Security with 2+ years of experience in DevSecOps or a related security role.

Responsibilities

• Support the integration and operation of automated security checks in CI/CD pipelines.
• Work with developers to reproduce findings, understand root causes and apply secure coding guidance.
• Maintain clear documentation, operational procedures and vulnerability reporting.
• Develop basic automation using Python, Bash or similar scripting languages and integrate tools through REST APIs.
• Participate in secure coding awareness, threat modeling and application security improvement activities under senior guidance.

Qualifications

• and Experience 2+ years of experience in DevSecOps, security-focused DevOps, application security or a related role.
• Working knowledge of CI/CD pipelines and source control platforms such as GitHub.
• Foundational understanding of SAST, SCA, DAST, OWASP Top 10 and common application vulnerabilities.
• Basic scripting skills in Python, Bash or a similar language.
• Ability to analyze technical findings, document work clearly and collaborate with engineering teams.
• Strong willingness to build deeper application security skills.

Nice to have

• Familiarity with REST APIs, containerized development or modern software delivery workflows.
• Relevant certification or training such as Security+, GitHub Actions or equivalent.
• Core Competencies Learning agility and technical curiosity
• Attention to detail and structured problem solving
• Teamwork and service orientation
• Accountability and clear communication
• We hire for skills and capabilities, not just credentials if this role excites you, but doesnt perfectly match your resume, we encourage you to apply anyway.
• How We Work
• Where you work matters because collaboration, innovation and patient impact happen in many settings. Our roles are structured across four work models: site-essential, site-by-design, field-based and remote-by-design. The model assigned to this role is based on its core responsibilities. Learn more at https://careers.bms.com/ways-of-working.
• Supporting People with Disabilities
• Candidate Rights
• BMS will consider qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.
• For roles based in Los Angeles County only: If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers.bms.com/california-residents/
• Data Protection
• We will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at https://careers.bms.com/fraud-protection.
• Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.
• If this posting is missing required information required by local law or incorrect, contact BMS at hidden_email check your .