Description

Key Responsibilities

• Implement AppSec practices across the software development lifecycle
• Perform threat modeling and secure design reviews for critical applications
• Conduct secure code reviews and provide actionable feedback to development teams
• Analyze vulnerabilities for exploitability and reachability to prioritize remediation efforts
• Support AppSec tool onboarding and rollout across the organization
• Integrate AppSec tools and processes into CI/CD pipelines
• Enable developers with secure coding practices through training and guidance
• Provide comprehensive reporting and security dashboards for stakeholders

Qualifications

• 8–12 years of experience in application development and security
• Proficiency in Java, .NET, Python, and Node.js development environments
• Strong expertise in application security practices and methodologies
• Hands-on experience with SAST, DAST, and SCA security testing tools
• Knowledge of secure software development lifecycle (SDLC) processes
• Cloud platform experience with AWS and/or Azure environments
• Excellent stakeholder management and communication skills

Key Skills

Education

Bachelor's degree