Description

Establish secure coding practices, enforce standards, and conduct security reviews for Java, .NET, Python, and JavaScript applications.

This role is on-site.

Responsibilities

• Define and enforce secure coding standards for Java, .NET, Python, and JavaScript.
• Conduct secure design and architecture reviews for new and legacy systems.
• Implement secure authentication using SAML2, OIDC, and OAuth2, ensuring safe token and session handling.
• Apply OWASP Top 10 and API Security standards to secure REST APIs and web services.
• Educate developers on vulnerabilities, secure coding, and remediation strategies.

Required Skills

• 4+ years in secure application development with 1+ year of hands-on software development.
• Expertise in SAST, DAST, and SCA concepts (e.g., Veracode, Burp Suite, Rapid7).
• Strong understanding of Web/Mobile architecture, HTTP/HTTPS, WebSockets, and REST API security.
• Experience securing Java (Spring Boot) and JavaScript (React) applications.
• Familiarity with integrating applications into WAFs, load balancers, and security monitoring tools.
• Experience applying NIST 800-53 and 800-171 controls at the application design level.
• Bachelor's degree or equivalent combination of experience and education.

Preferred Skills

• Experience with containerized applications (Docker, Kubernetes).
• Knowledge of Core Java, J2EE, AngularJS, HTML5, CSS.
• Familiarity with public safety or emergency response systems.

Key Skills

Education

Bachelor's degree