Description

You will serve as the senior subject matter expert for secure coding, application security maturity, and DevSecOps integration.

This role is hybrid.

Responsibilities

• Evaluate and implement secure coding processes and API configuration management best practices.
• Define security standards for CI/CD pipelines, including SAST/SCA/DAST testing and DevSecOps principles.
• Support ISO 27001 certification preparation, audits, ICC control reviews, and OICs.
• Partner with Cyber Defense during incident response and collaborate with Enterprise Architecture and IT Operations.

Required Skills

• 5+ years in cybersecurity analysis, vulnerability management, security consulting, or secure software engineering.
• Hands-on experience in incident response: detect, contain, investigate, and recover from security incidents.
• Experience securing Google Cloud Platform (GCP) assets and development pipelines.
• Proficiency with Git/GitHub, Java, JavaScript, Python, and Ruby.
• Familiarity with automation test scripts, test plans, and security testing tools within an SDLC.
• Knowledge of CISSP, CISA, or CISM frameworks.

Preferred Skills

• Experience with Microsoft Azure, AWS, or other enterprise cloud platforms.
• Practical use of SAST/SCA tools such as CheckMarx, FOSSA, 42Crunch, or BlackDuck.

Key Skills

Education

Any Graduate