Description

Lead application security efforts by identifying vulnerabilities and integrating security into the development lifecycle.

This role is on-site.

Responsibilities

• Conduct vulnerability assessments, penetration testing, and secure code reviews.
• Guide development teams on implementing secure coding practices and OWASP Top 10 standards.
• Manage Software Composition Analysis (SCA) to identify vulnerabilities in open-source and third-party components.
• Integrate SAST and DAST tools into CI/CD pipelines for automated security checking.
• Secure applications and workloads across cloud environments using WAF and cloud-native security services.

Required Skills

• 15+ years of experience in application security.
• Expertise in SAST and DAST tools including Veracode, AppSec, and Burp Suite.
• Proficiency with SCA tools such as Veracode and AppSec.
• Deep knowledge of OWASP Top 10 security frameworks.
• Experience securing workloads on AWS, Azure, or GCP.
• Practical experience with Web Application Firewalls (WAF).
• Strong understanding of cloud-native security services.

Preferred Skills

• Automation experience using Python, Bash, or PowerShell.
• Certifications including CISSP, CEH, CCSP, or GWAPT.
• Knowledge of NIST, PCI-DSS, and GDPR compliance standards.

Key Skills

Education

Any Graduate