Description

You will secure the software development lifecycle by integrating security controls and best practices into every stage of development.

Responsibilities

• Embed security best practices into the SDLC and collaborate with the SDLC Council to maintain secure coding standards.
• Conduct in-depth security assessments, including code reviews, vulnerability scanning, and detailed threat modeling.
• Identify, risk assess, and prioritize mitigation strategies for vulnerabilities such as the OWASP Top 10.
• Partner with DevOps teams to implement security within CI/CD pipelines for automated deployment of secure code.
• Develop, configure, and maintain tools for static and dynamic application security testing (SAST/DAST).
• Evaluate third-party software and APIs for security compliance and assist in application-level incident response.
• Report on risk through metrics including KPIs, KRIs, and OKRs to inform executive decision-making.

Required Skills

• 8+ years of experience in application security, penetration testing, or secure software development.
• Proficiency in programming languages including Java, JavaScript, C/C++, C#, and Python.
• Experience with build tools such as Maven.
• Strong knowledge of SDLC, threat modeling, and code reviews.
• Deep understanding of OWASP Top 10 and application-level vulnerabilities.
• Ability to explain technical security issues to both technical and non-technical stakeholders.
• Bachelor’s or master’s degree in computer science, Information Security, or a related field.

Preferred Skills

• Relevant security certifications such as CEH, OSCP, CISSP, or GWAPT.

Key Skills

Education

Any Graduate