Description

You will secure application codebases, integrate security into CI/CD pipelines, and remediate vulnerabilities across Java, .NET, Python, and Node.js environments.

This role is on-site.

Responsibilities

• Develop and review secure code in Java, C#, Python, Node.js, Go, or C++.
• Remediate findings from SAST, DAST, and SCA scans (e.g., SonarQube, Checkmarx, Snyk).
• Integrate security checks into Jenkins, GitLab CI/CD, and Azure DevOps pipelines.
• Perform threat modeling, CVE analysis, and root cause analysis for security issues.
• Ensure compliance with OWASP Top 10, CWE, and SSDLC standards.

Required Skills

• 5+ years of experience in application security or secure software development.
• Strong programming skills in Java, .NET/C#, Python, Node.js, or C++.
• Hands-on experience with SAST, DAST, and SCA tools (e.g., Veracode, Fortify, OWASP ZAP, Burp Suite).
• Experience with cloud platforms (AWS, Azure, or GCP) and their security best practices.
• Proficiency in CI/CD tools: Jenkins, GitLab CI/CD, or Azure DevOps.
• Knowledge of Microservices, REST APIs, and web application architecture.
• Experience with vulnerability management, dependency remediation, and security patching.

Preferred Skills

• Experience with GitHub Advanced Security, Black Duck, Prisma Cloud, or Qualys.
• Understanding of DevSecOps principles and automated security testing.

Key Skills

Education

Any Gradute