Description

You will own the implementation and strategy for DevSecOps tooling across the software lifecycle.

This role is hybrid.

Responsibilities

• Deploy and integrate Nexus IQ and Prisma Cloud into CI/CD workflows for policy enforcement and dependency scanning.
• Design and implement an SBOM system to map deployed components and manage software obsolescence.
• Define and improve KPIs for application security, including scanner coverage and vulnerability trends.
• Design and implement a framework for prioritizing vulnerabilities using automated intelligence.
• Provide mentorship to developers on DevSecOps practices within Java and Spring Boot environments.

Required Skills

• 5+ years of professional experience.
• Expertise in Java and Spring Boot environments.
• Experience integrating security tooling into CI/CD workflows.
• Familiarity with Dynamic Application Security Testing (DAST) strategies.
• Knowledge of dependency scanning, Nexus IQ, and Prisma Cloud.
• Ability to design and implement SBOM processes.
• Experience defining and tracking security metrics and KPIs.

Key Skills

Education

Any Graduate