Description

You will secure the software development lifecycle through proactive testing and integration.

Responsibilities

• Perform threat modeling, code reviews, and static/dynamic analysis to identify vulnerabilities.
• Integrate security controls into DevOps and CI/CD pipelines.
• Identify security defects within Docker, containers, and Kubernetes environments.
• Mitigate common vulnerabilities, specifically those outlined in the OWASP Top 10.
• Manage security automation using Terraform, GitHub Actions, and Jenkins.

Required Skills

• 5+ years of experience in application security, penetration testing, or secure software development.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Proficiency in writing source code in JavaScript, Java, C/C++/C#, or Python.
• Technical knowledge of web application, mobile, API, and cloud security (AWS, Azure, GCP).
• Experience with Infrastructure as Code (IaC) and container security.
• Hands-on experience with SAST, DAST, and IAST tools.
• Familiarity with software security frameworks including Maven, Node, and Gradle.
• Experience with deployment and automation tools such as Terraform, GitHub Actions, Jenkins, and AWS CloudFormation.
• Knowledge of compliance and regulatory frameworks like SOC 2.

Preferred Skills

• Industry certifications such as CEH, OSCP, or GWAPT.

Key Skills

Education

Bachelor's or Master's degrees