Description

You will lead application security efforts by analyzing vulnerabilities, prioritizing risks, and driving remediation in code. This role combines hands-on development expertise with security leadership to embed secure practices into the SDLC and CI/CD pipelines.

This role is on-site.

Responsibilities

• Analyze open vulnerabilities using Invicti, Checkmarx, and Wiz, aligning remediation with CVSS scores and business criticality.
• Perform secure code reviews and directly fix vulnerabilities such as injection flaws, authentication issues, and insecure APIs.
• Translate SAST/DAST findings into practical code fixes, including input validation, encryption, and secure configurations.
• Integrate automated scanning and security gates into CI/CD pipelines, enforcing SDLC controls like branch protection and release gates.
• Establish and track AppSec KPIs (MTTR, false positives) and mentor teams on secure coding practices.

Required Skills

• 14+ years of experience in application development and security.
• Strong development expertise in .NET, Java, APIs, and Web Apps.
• Hands-on experience with SAST/DAST tools: Checkmarx, Invicti, and Wiz.
• Deep knowledge of OWASP Top 10, CWE, and CVSS-based risk prioritization.
• Proven experience in DevSecOps and CI/CD integration.
• Ability to debug, refactor, and resolve complex security issues in code.
• Bachelor’s degree in Computer Science, Information Technology, or related field.

Preferred Skills

• Experience overseeing cloud vulnerability remediation and identity exposure risks.
• Track record of reducing MTTR and driving continuous improvement in vulnerability remediation.

Key Skills

Education

Bachelor’s degree