Description

You will secure application development lifecycles by integrating security controls into modern DevOps workflows.

Responsibilities

• Implement DevSecOps, Infrastructure as Code, and Policy as Code practices within a modern development shop.
• Perform threat modelling and manage container scanning and supply chain security.
• Execute security testing using DAST, IAST, and automated scanning tools.
• Secure cloud environments across multiple cloud providers.
• Integrate security tooling into CI/CD pipelines to automate vulnerability detection.

Required Skills

• 5+ years of experience focused on Application Security.
• Deep expertise in DevSecOps and Site Reliability Engineering (SRE).
• Hands-on experience with DAST, IAST, and Threat Modelling.
• Proficiency with DevOps tools and scripting.
• Experience with SQL or PostgreSQL databases.
• Deep experience with at least one major SAST tool (e.g., Checkmarx, Fortify, or GHAS CodeQL).
• Deep experience with at least one SCA/Supply Chain tool (e.g., BlackDuck, Prisma, CycloneDX, JFrog Xray, or GHAS Secrets/Dependabot).
• Deep experience with at least one DAST tool (e.g., Invicti, Netsparker, WebInspect, AppScan, BurpSuite, or ZAP).
• Knowledge of Cloud Security and multi-cloud environments.

Preferred Skills

• Experience with GenAI and AI development security.
• Relevant security certifications.

Key Skills

Education

Any Graduate