Description

You will act as a security auditor focused on designing and building secure platforms through dynamic, static, and software composition analysis.

Responsibilities

• Partner with distributed software development teams to implement secure coding practices and mitigate risk.
• Lead efforts to implement security patterns using orchestration and automation tools for secure configuration and compliance.
• Conduct assessments using DAST, SAST, and SCA to mature secure software development practices.
• Work across front-end, back-end, and cloud-based environments to ensure continuous authorization and verification.

Required Skills

• 5+ years of total IT experience.
• 3+ years implementing secure coding practices including OWASP Top 10, SANS, CERT, CWE Top 25, and Cloud Security Alliance.
• 3+ years experience with compiled and interpreted languages: Angular, React, Node.js, Java, Spring Boot, IBM WebSphere, Oracle JBoss, and .NET stacks.
• 3+ years experience in DevSecOps, networking, infrastructure, and security automation.
• 3+ years experience building and deploying secure distributed web and mobile applications.
• Proficiency with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud).
• Deep understanding of OWASP vulnerabilities: XSS, Injection, SSRF, CSRF, and XML entity attacks.
• Experience with API Security, JWT, OAuth, OIDC, and PKCE.
• Knowledge of HTTP request/response headers for web and RESTful API calls using Chrome, Firefox, or Edge dev tools.
• High-level understanding of containers and cloud development (Azure, AWS, GCP).

Preferred Skills

• Experience with Coverity, BlackDuck, STRM, or Fortify.

Key Skills

Education

Any Gradute