Description

Own application security testing, vulnerability analysis, and CI/CD pipeline integration for software systems.

This role is on-site.

Responsibilities

• Schedule and execute regular application tests, including penetration, purple team, and red team exercises.
• Analyze, validate, and report vulnerabilities using security testing tools like Fortify, Burp Suite, and Checkmarx.
• Automate security scans and integrate them into CI/CD pipelines using Jenkins and GitHub.
• Review source code to identify security issues and duplicate logic, enhancing threat modeling and asset management.
• Present findings to stakeholders and collaborate with developers to improve security practices and support incident response.

Required Skills

• 5+ years of experience in application security, with strong understanding of SAST, DAST, SCA, and OWASP Top 10.
• Proficiency in programming languages including C#, .NET, C, C++, Java, Python, and JavaScript (Node.js, React).
• Experience with web services, JSON, API testing, and relational databases (SQL Server, MySQL).
• Familiarity with security platforms such as AppScan, Fortify, and Veracode.
• Ability to verify vulnerabilities through manual testing and write/understand SQL queries.
• Knowledge of internet architecture and basic Azure services.

Preferred Skills

• 1-3 years of web development experience with HTML, ASP, ColdFusion, JSP, or React.
• Experience with OOP concepts and source code management best practices.

Key Skills

Education

Any Gradute