Description

You will own the security posture of applications across the development lifecycle, from design review through automated and hands-on testing.

This role is on-site.

Responsibilities

• Operate the Application Development Security Lifecycle, maintaining policies and standards aligned with NIST, OWASP, and SANS.
• Establish security requirements early in the SDLC and provide subject matter expertise to development teams.
• Implement and integrate security assessment technologies including SAST, DAST, Software Composition Analysis, WAF, and bug bounty programs.
• Train software engineers on secure coding practices through sessions, blogs, and one-on-one education.
• Document and publish technology guidance and repeatable processes for large cloud environments.

Required Skills

• 10+ years of software engineering experience in Java, C++, or .NET.
• Expertise deploying, configuring, and using SAST and DAST tools in large environments.
• Proficiency with Java, C++, or .NET development practices and static code analyzers.
• Experience designing solutions that integrate transparently with the CI/CD pipeline.
• Familiarity with application development in large cloud environments.
• Ability to document and publish technology guidance and repeatable processes.

Key Skills

Education

Any Graduate