Description

You will lead the proactive identification and resolution of security risks, vulnerabilities, and incidents across the ecosystem.

Responsibilities

• Perform vulnerability assessments using enterprise security tools and methodologies to evaluate IT security and risk posture.
• Design security solutions and automation scripts that enable developers to consume security services within CI/CD pipelines.
• Drive mitigation efforts by documenting remediation options and monitoring the performance of risk remediation tasks.
• Act as the technical lead for product teams regarding automation, CI/CD, and Product Application Security Operations.
• Update monitoring environments and tools to maintain necessary visibility into the network, systems, and software.

Required Skills

• 7+ years of experience in application security roles, including leadership responsibilities.
• 5+ years of experience in enterprise technology environments covering operations, networking, systems, or infrastructure architecture.
• 3+ years of experience in Web Application Security, SSDLC, and Threat Modelling.
• 3+ years of experience in a Security Operations Center (SOC) or Continuous Monitoring role.
• Hands-on development experience in Java, C#, or C++.
• Proficiency with infrastructure security, including IDS/IPS, firewalls, SIEM, server/OS hardening, and encryption (transport and at-rest).
• Experience managing application security testing tools such as SAST, DAST, and Open Source Vulnerability Scanning.
• Practical experience implementing SOX, PCI, ISO, NIST 800-53, or NIST CSF.
• Deep understanding of OWASP Top 10 and CWE 25.
• Technical proficiency with SonarQube, Snyk, Qualys, or Wiz.
• Bachelor's degree in Information Systems, Engineering, Computer Science, or a related technical discipline.

Preferred Skills

• Professional credentials from ISC2, SANS, or ISACA.

Key Skills

Education

Bachelor's degree