Description

You own vulnerability assessment, secure coding validation, and CI/CD security integration for critical software.

This role is on-site.

Responsibilities

• Schedule and execute penetration, purple team, and red team tests on systems.
• Analyze, validate, and track vulnerabilities using Fortify, Burp Suite, Checkmarx, AppScan, and Veracode.
• Review source code for security flaws and duplicates, presenting findings to stakeholders.
• Automate security scans and integrate them into CI/CD pipelines via Jenkins and GitHub.
• Support incident response, improve threat modeling, and maintain vulnerability dashboards.

Required Skills

• 5+ years of experience in application security penetration testing and vulnerability assessment.
• Proficiency in SAST, DAST, SCA, and OWASP Top 10 methodologies.
• Strong programming skills in .NET, C, C++, Java, Python, and JavaScript (Node, React).
• Experience with web services, JSON, and API testing.
• Knowledge of relational databases (SQL Server, MySQL) and SQL proficiency.
• Familiarity with Azure cloud services and source code management tools.
• Ability to verify vulnerabilities through manual testing and code review.

Preferred Skills

• 1-3 years of web development experience with HTML, ASP, ColdFusion, or JSP.
• Experience with OOP concepts and pipeline integration.

Key Skills

Education

Any Graduate