Description

You will secure the software development lifecycle through deep technical analysis and automated security integration.

This role is on-site.

Responsibilities

• Perform threat modeling, code reviews, and static/dynamic analysis to identify vulnerabilities.
• Integrate security controls into DevOps and CI/CD pipelines.
• Identify security defects within Docker containers and Kubernetes environments.
• Implement mitigations for OWASP Top 10 vulnerabilities and common security flaws.
• Manage encryption, authentication, and access control implementations.

Required Skills

• 8+ years of experience in application security, penetration testing, or secure software development.
• Proficiency in at least one programming language: JavaScript, Java, C, C++, C#, or Python.
• Hands-on experience with SAST, DAST, SCA, IAST, and fuzzing tools.
• Experience with cloud security (AWS, Azure, GCP) and Infrastructure as Code (Terraform, AWS CloudFormation).
• Knowledge of CI/CD tools including GitHub Actions and Jenkins.
• Experience with containerization using Docker and Kubernetes.
• Familiarity with software security frameworks like Maven, Node, or Gradle.
• Understanding of API security and mobile security.
• Knowledge of compliance frameworks such as SOC 2.

Preferred Skills

• Relevant certifications such as CEH, OSCP, CISSP, or GWAPT.

Bachelor's degree in Computer Science, Information Security, or a related field.

Key Skills

Education

Bachelor's degree