Description

Lead the application security program and manage the secure SDLC process.

This role is on-site.

Responsibilities

• Lead the application security program and ensure a secure SDLC.
• Perform source code reviews and application penetration tests across web, mobile, APIs, and plugins.
• Conduct threat modeling using STRIDE and other frameworks.
• Identify and resolve open-source software compliance risks (CopyLeft).
• Create detailed, well-structured security test plans and test cases.

Required Skills

• 4+ years of experience in application security testing.
• Proficiency in Python, Bash, or VBScript for security automation.
• Hands-on experience with Burp Suite, Acunetix, Metasploit, and Kali Linux.
• Strong knowledge of OWASP, SANS Top 25, and emerging threats.
• Experience with web application firewalls, encryption, and networking.
• Practical knowledge of secure coding concepts and server-side security requirements.
• Experience working within Agile or Kanban methodologies using JIRA.
• Ability to capture and diagnose logs for application errors.
• Experience with security testing techniques and QA methodologies.

Preferred Skills

• Security certifications such as OSCP or CEH.

Key Skills

Education

ANY GRADUATE