Description

You will secure application lifecycles by integrating security practices into modern development workflows.

This role is on-site.

Responsibilities

• Implement DevSecOps, Infrastructure as Code, and Policy as Code practices.
• Execute threat modelling and manage container scanning and supply chain security.
• Perform security testing using DAST, IAST, and automated scanning tools.
• Secure cloud environments across multiple providers and manage secrets and dependency vulnerabilities.

Required Skills

• 5+ years of dedicated experience in Application Security.
• Hands-on experience with DAST, IAST, and Threat Modelling.
• Deep expertise in at least one SAST tool (e.g., Checkmarx, Fortify, or GHAS - CodeQL).
• Deep expertise in at least one SCA tool (e.g., BlackDuck, Prisma, CycloneDX, JFrog Xray, or GHAS - Dependabot/Secrets).
• Deep expertise in at least one DAST tool (e.g., Invicti Netsparker, WebInspect, AppScan, BurpSuite, or ZAP).
• Experience with DevOps tools, scripting, and Site Reliability Engineering (SRE) principles.
• Experience with Cloud Security across multiple cloud providers.
• Proficiency with SQL or PostgreSQL.
• Degree in any field of study.

Preferred Skills

• Experience with GenAI or AI development.
• Relevant security certifications.

Key Skills

Education

Any Graduate