Description

Senior subject matter expert focusing on secure coding, application security maturity, and DevSecOps integration.

Responsibilities

• Evaluate and implement secure coding processes and API configuration management best practices.
• Define security standards for CI/CD pipelines, SAST/SCA/DAST testing, and DevSecOps principles.
• Support ISO 27001 certification preparation and assist teams with Audits, ICC Control Reviews, and OICs.
• Partner with Cyber Defense during incident response and collaborate with Enterprise Architecture and IT Operations.

Required Skills

• 5+ years of experience in cybersecurity analysis, vulnerability management, security consulting, or secure software engineering.
• Hands-on experience in incident response to detect, contain, investigate, and recover from security incidents.
• Proven experience in security operations, including delivering findings to engineering teams and consulting on risk priorities.
• Experience securing Google Cloud Platform (GCP) assets and development pipelines.
• Proficiency with Git/GitHub, Java, JavaScript, Python, and Ruby.
• Familiarity with automation test scripts, test plans, and security testing tools within an SDLC.
• Knowledge of CISSP, CISA, or CISM frameworks.

Preferred Skills

• Experience with Microsoft Azure, AWS, or other enterprise cloud platforms.
• Practical use of SAST/SCA tools such as CheckMarx, FOSSA, 42Crunch, or BlackDuck.

Key Skills

Education

Any Graduate