Description

Lead application security activities including penetration testing, source code review, and vulnerability remediation advisory services.

This role is hybrid.

Responsibilities

• Support and lead operational application security activities, including penetration tests and mobile security tests.
• Conduct secure code reviews and architecture assessments to identify vulnerabilities early in the SDLC.
• Provide advisory services to IT teams to support the remediation of security findings.
• Utilize industry-standard tools for penetration testing and source code review.
• Apply OWASP practices and Agile methodology to integrate security into the development lifecycle.

Required Skills

• 6+ years of IT experience with at least 3 years focused on Application Security and Code Security Review.
• Hands-on experience with BurpSuite, OWASP ZAP, Fortify, Veracode, or Nessus.
• Strong knowledge of Web Application Security, including API, web, and mobile security.
• Proficiency in Code and Architecture review processes.
• Understanding of SDLC and Agile Methodology.
• Professional certification in information security (e.g., GPEN, OSCP) is required or preferred.
• Excellent communication skills for advising technical teams.

Preferred Skills

• Familiarity with C/C++, .NET, Java, Cobol, or Python.
• Strong development experience in one or two programming languages.

Key Skills

Education

Any Gradute