Description

Embed security into every phase of the software development lifecycle through threat modelling, vulnerability assessments, and CI/CD integration.

This role is on-site.

Responsibilities

• Perform threat modelling and risk assessments for application architecture.
• Execute vulnerability assessments using SAST and DAST tools.
• Integrate security controls into CI/CD pipelines and DevOps workflows.
• Manage vulnerability remediation and coordinate incident response.
• Ensure compliance with major security frameworks and standards.

Required Skills

• 8+ years of experience in Application Security and SSDLC.
• Deep knowledge of OWASP and NIST standards.
• Proficiency with security tools: Veracode, IBM AppScan, SD Elements, Burp Suite.
• Experience with CI/CD security integration and DevSecOps practices.
• Strong background in vulnerability management and penetration testing.
• Familiarity with security frameworks: ISO 27001, PCI-DSS, SOC 2, HIPAA, GDPR, FedRAMP.
• Experience in security operations and incident response.

Preferred Skills

• Experience with container security (Docker, Kubernetes security scanning).
• Knowledge of infrastructure as code security (Terraform, CloudFormation).
• Certifications such as CISSP, CSSLP, CEH, or GWAPT.

Key Skills

Education

Any Graduate