Description

Secure the software development lifecycle by identifying and mitigating vulnerabilities within application code and architecture.

Responsibilities

• Conduct manual code reviews and static analysis to identify security flaws.
• Distinguish between false positives and true positives during security testing.
• Consult with developers and architects to provide remediation guidance and demonstrate risks.
• Validate remediations against prior findings and track tasks through ticketing systems.
• Stay current on application security attack vectors and emerging risks.

Required Skills

• 5+ years of experience in application security and web application security testing.
• Extensive experience performing both automated and manual secure code reviews.
• Proven development experience in multiple programming languages.
• Deep familiarity with OWASP Top 10 and application security risks.
• Experience working within large enterprises using Agile methodologies and CI/CD pipelines.
• Ability to automate repeatable security tasks.
• Proficiency with AWS or other cloud technologies.
• Strong verbal and written communication skills for technical remediation guidance.
• Relevant certification such as GPEN, GWAPT, GWEB, OSCP, CISSP, or eCPPT.

Preferred Skills

• Experience with security tools including Veracode, Checkmarx, Fortify, Burp, IBM AppScan, or BlackDuck.

Key Skills

Education

Any Graduate