Description

You will own the security posture of our applications across the development lifecycle.

Responsibilities

• Operate the Application Development Security Lifecycle from design review through automated and hands-on testing.
• Maintain and contribute to Application Development Security Policies and standards, tracking industry trends from NIST, OWASP, and SANS.
• Establish security requirements early in the SDLC by working with development teams and providing security subject matter expertise.
• Implement, maintain, and integrate security assessment technologies like SAST, DAST, Software Composition scanners, WAF, and bug bounty programs.
• Train software engineers on secure coding practices through sessions, blogs, and one-on-one education.

Required Skills

• 10+ years of software engineering experience in Java, C++, or .NET.
• Expertise deploying, configuring, and using SAST and DAST tools in large environments.
• Experience designing solutions that integrate transparently with the CI/CD pipeline.
• Proficiency with Java, C++, or .NET development practices.
• Experience with static code analyzers (SAST) and dynamic testing (DAST).
• Familiarity with application development in large cloud environments.
• Ability to document and publish technology guidance and repeatable processes.

Key Skills

Education

Any Graduate