Description

Lead the application security program, defining standards, policies, and best practices while integrating security into the SDLC.

This role is on-site.

Responsibilities

• Perform security architecture assessments, threat modeling, and design reviews.
• Conduct secure code reviews, penetration testing, and vulnerability scanning.
• Drive security automation and tooling implementation across CI/CD pipelines.
• Manage vulnerability remediation and guide mitigation strategies.
• Collaborate with development, DevOps, QA, and product teams.

Required Skills

• 12+ years of IT experience, with 7+ years focused on Application Security.
• Hands-on experience with SAST, DAST, IAST, and SCA tools.
• Deep knowledge of OWASP Top 10, secure SDLC, and threat modeling.
• Experience securing applications in AWS, Azure, or GCP environments.
• Strong background in DevSecOps, CI/CD pipelines, and automation.
• Proficiency in Java, .NET, Python, or JavaScript for code review.
• Experience securing APIs and microservices.
• Familiarity with NIST, ISO, or FedRAMP compliance frameworks.

Key Skills

Education

Any Gradute