Description

You will focus on securing application lifecycles and integrating security into modern development workflows.

Responsibilities

• Implement DevSecOps, Infrastructure as Code, and Policy as Code practices within a modern development shop.
• Execute threat modelling and manage container scanning and supply chain security.
• Perform security testing using DAST, IAST, and automated scanning tools.
• Secure cloud environments across multiple cloud providers.
• Manage secrets and dependency vulnerabilities within the CI/CD pipeline.

Required Skills

• 5+ years of experience dedicated to Application Security.
• Hands-on experience with DAST, IAST, and Threat Modelling.
• Deep expertise in at least one SAST tool (e.g., Checkmarx, Fortify, or GHAS - CodeQL).
• Deep expertise in at least one SCA tool (e.g., BlackDuck, Prisma, CycloneDX, JFrog Xray, or GHAS - Dependabot/Secrets).
• Deep expertise in at least one DAST tool (e.g., Invicti Netsparker, WebInspect, AppScan, BurpSuite, or ZAP).
• Experience with DevOps tools, scripting, and Site Reliability Engineering (SRE) principles.
• Experience with Cloud Security and multiple cloud providers.
• Proficiency with SQL or PostgreSQL.
• Degree in any field of study.

Preferred Skills

• Experience with GenAI or AI development.
• Relevant security certifications.

Key Skills

Education

Any Graduate