Description

You will design, implement, and maintain application security frameworks and standards across enterprise systems.

Responsibilities

• Conduct secure code reviews and identify vulnerabilities in web, mobile, and API applications.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Develop threat models and perform risk assessments for new and existing applications.
• Identify, assess, and remediate application security risks based on business impact.
• Monitor and respond to application-level security incidents.

Required Skills

• 12+ years of experience in application security or cybersecurity.
• Strong hands-on experience with security testing tools (SAST, DAST, IAST, penetration testing).
• In-depth understanding of secure coding practices in Java, .NET, Python, and JavaScript.
• Extensive experience with OWASP Top 10 and Secure SDLC methodologies.
• Proven experience securing RESTful APIs, microservices, and cloud-native applications.
• Hands-on experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Proficiency with application security tools like Fortify, Checkmarx, or Burp Suite.
• Experience securing applications built on Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.
• Bachelor’s degree in Computer Science or related field, or equivalent experience.

Key Skills

Education

Bachelor’s degree