Description

Own cloud security risk assessments, application security testing, and DevSecOps integration for enterprise-scale environments.

This role is hybrid.

Responsibilities

• Conduct cloud application security assessments to identify vulnerabilities and compliance gaps across AWS, Azure, and cloud-native environments.
• Perform application penetration testing and dynamic security testing using Burp Suite Professional, including IoT and ICS/OT assessments.
• Integrate security into CI/CD pipelines using GitLab, establishing automated security gates and compliance checks.
• Implement and maintain DevSecOps tooling including SAST, DAST, SCA, container security, and IaC scanning.
• Execute threat modeling, security design reviews, and third-party vendor security assessments.

Required Skills

• 5+ years of hands-on experience in application security, penetration testing, or cloud security.
• Strong expertise in AWS, Azure, cloud security architecture, IAM, and cloud-native security controls.
• Advanced proficiency with Burp Suite Professional, including extensions, macros, and custom configurations.
• Deep understanding of OWASP Top 10, API security risks, and common application vulnerabilities.
• Proven experience implementing security within GitLab CI/CD pipelines and shift-left practices.
• Hands-on knowledge of SAST, DAST, SCA, container scanning, and Kubernetes/Docker security.
• Familiarity with security frameworks including NIST, ISO 27001, CIS Controls, and SOC 2.

Preferred Skills

• Experience supporting financial services or highly regulated enterprise environments.
• Familiarity with IEC 62443 and operational technology security frameworks.

Key Skills

Education

Any Graduate