Description

You will lead cloud application security assessments, penetration testing, and DevSecOps integration across AWS and Azure environments.

This role is hybrid.

Responsibilities

• Conduct security assessments for AWS, Azure, and cloud-native apps, identifying vulnerabilities and compliance gaps.
• Execute application penetration testing and dynamic security testing using Burp Suite Professional.
• Partner with engineering teams to integrate security into GitLab CI/CD pipelines, establishing automated gates and compliance checks.
• Implement and maintain DevSecOps tooling, including SAST, DAST, SCA, container security, and IaC scanning.
• Perform threat modeling, security design reviews, and third-party vendor security assessments.

Required Skills

• 5+ years of hands-on experience in application security, penetration testing, or cloud security.
• Strong expertise in AWS, Azure, cloud security architecture, and IAM.
• Advanced proficiency with Burp Suite Professional, including extensions, macros, and custom configurations.
• Experience performing web application, API, IoT, and ICS/OT security assessments.
• Proven implementation of security within GitLab CI/CD pipelines and DevSecOps practices.
• Hands-on knowledge of SAST, DAST, SCA, and Kubernetes/Docker security.
• Familiarity with security frameworks including NIST, ISO 27001, CIS Controls, and SOC 2.

Preferred Skills

• CISSP, CEH, GWAPT, CSSLP, or AWS Security Specialty certifications.
• Experience supporting financial services or highly regulated enterprise environments.

Key Skills

Education

Bachelor's degree