Description

You will own the implementation and maintenance of security controls across the software development lifecycle.

This role is remote.

Responsibilities

• Design and maintain SAST, SCA, API, and schema validation patterns using GitHub Actions with deterministic policy-as-code gates.
• Implement source-level PHI/PII and secret detection using regex and ML classifiers in CI/CD to block sensitive data.
• Define and automate Layer 7 security standards, including TLS 1.3, HSTS, OAuth/OIDC, and JWT lifetimes via OpenAPI linting.
• Build and maintain application-layer encryption, tokenization, and redaction libraries for product teams.
• Generate SBOMs per build, sign artifacts, and enforce provenance verification at deployment time.

Required Skills

• 5+ years in AppSec or Software Engineering with data-centric security ownership.
• Hands-on experience with GitHub Actions, secret prevention tooling, API security, and OAuth/OIDC.
• Proficiency in Python, Go, or TypeScript.
• Experience with CI/CD pipeline security implementation.
• Familiarity with SAST and SCA tooling integration.
• Strong developer empathy.

Key Skills

Education

Any Gradute