Description

You will secure web applications and cloud infrastructure through automated testing and DevSecOps integration.

This role is on-site.

Responsibilities

• Perform application security testing using BurpSuite, ZAP, or similar toolsets.
• Integrate security linting, SAST, or DAST tools directly into CI pipelines.
• Design and implement automated cloud resource security solutions, such as automated ingress blocking.
• Assess vulnerabilities and communicate findings to engineering teams or non-technical stakeholders.
• Apply security principles throughout the Software Development Lifecycle (SDLC).

Required Skills

• 10+ years of professional experience in security engineering.
• Hands-on experience with DevSecOps practices and CI pipeline integration.
• Proficiency in at least one language: C++, Node.js, or Python.
• Experience with Cloud Security Posture Management (CSPM) and automated security solutions.
• Strong understanding of AWS cloud technologies and solutions.
• Deep knowledge of web application vulnerabilities and assessment methodologies.
• Solid understanding of the Software Development Lifecycle (SDLC).
• Ability to translate technical vulnerabilities into actionable engineering language.

Preferred Skills

• Experience designing and implementing security automation such as honeypots.

Key Skills

Education

Any Graduate