Description

You will secure web and API applications through engineering support, vulnerability management, and offensive security testing.

This role is on-site.

Responsibilities

• Integrate security controls into the Secure SDLC, including threat modeling and design reviews.
• Administer vulnerability scanning tools like Tenable, tuning policies to reduce false positives.
• Implement SAST and DAST tools within CI/CD pipelines to ensure seamless integration with engineering teams.
• Validate vulnerabilities via manual testing and offensive security techniques, developing proof-of-concept exploits when required.
• Track vulnerabilities to closure, coordinating with development teams to ensure timely remediation and SLA adherence.

Required Skills

• 3–6 years of experience in Application Security or a related domain.
• Hands-on experience with SAST, DAST, and vulnerability scanning tools (e.g., Tenable).
• Strong understanding of OWASP Top 10, web application security, and API security.
• Experience integrating security tools into CI/CD pipelines such as Jenkins, GitHub Actions, or GitLab.
• Knowledge of secure coding practices and common vulnerability patterns.
• Bachelor’s degree in computer science, Information Security, or a related field.

Key Skills

Education

Bachelor's degree