Description

You will own the identification, assessment, and remediation of security risks and vulnerabilities across the software ecosystem.

Responsibilities

• Identify and resolve security risks, issues, and incidents through proactive vulnerability assessments.
• Design security solutions and automation scripts to address weaknesses and enable developer self-service.
• Act as the technical lead for product teams regarding CI/CD, automation, and application security operations.
• Monitor the security environment and drive mitigation efforts by documenting remediation options for risk scenarios.
• Facilitate risk remediation tasks and report findings to both technical and non-technical audiences.

Required Skills

• 7+ years of experience in application security roles, including leadership responsibilities.
• 5+ years of experience in enterprise technology environments covering operations, networking, or infrastructure.
• 3+ years of experience in Web Application Security, SSDLC, and Threat Modelling.
• 3+ years of experience in a Security Operations Center (SOC) or Continuous Monitoring role.
• Hands-on development experience in Java, C#, or C++.
• Deep understanding of OWASP Top 10 and CWE.
• Experience managing application security testing tools such as SAST, DAST, and Open Source Vulnerability Scanning.
• Proficiency with SonarQube, Snyk, Qualys, and Wiz.
• Practical knowledge of infrastructure security including IDS/IPS, firewalls, SIEM, and OS hardening.
• Experience implementing SOX, PCI, ISO, NIST 800-53, or NIST CSF frameworks.
• Bachelor's degree in Information Systems, Engineering, Computer Science, or equivalent work experience.

Preferred Skills

• Professional credentials from ISC2, SANS, or ISACA.

Key Skills

Education

Any Gradute