• Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning.
• Assess findings involving cloud credentials, API keys, private keys and other secrets to determine the appropriate remediation approach.
• Use existing scripts to validate whether identified credentials remain active.
• Review, modify and improve existing validation scripts to increase efficiency; extensive automation development is not the primary focus.
• Partner with software development teams and relevant credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate.
• Draw on developers’ application knowledge to support investigations and resolve findings.
• Track remediation progress and communicate findings, dependencies and blockers.
• Manage assigned work independently and maintain strong follow-through throughout the engagement.

• Three or more years of hands-on application security experience.
• Experience investigating and remediating exposed secrets or hard-coded credentials within source code repositories.
• Strong scripting experience in at least two of the following: PowerShell, Bash and Python.
• Strong Git/GitHub knowledge and experience supporting engineering remediation projects.
• Ability to understand and improve existing scripts.
• Strong communication and collaboration skills, including experience working directly with software developers.
• Ability to manage competing priorities and drive findings through resolution within a short-term engagement.

• Experience with GitHub Advanced Security secret scanning.
• Experience investigating multiple credential types, including cloud credentials, API keys and private keys.
• Healthcare or revenue cycle management experience. Candidates from other industries are welcome.

LaSalle Network is an Equal Opportunity Employer m/f/d/v.

All assignments are at-will and their duration is subject to change.