Description

You will own the implementation and maintenance of security practices within the software development lifecycle.

This role is on-site.

Responsibilities

• Collaborate with engineering teams to implement client-specific security policies across CI/CD security tools, including SAST, DAST, and SCA.
• Develop automated security and compliance capabilities by working with Development, DevOps, and Security teams.
• Define code-level security rules for web and mobile applications written in Java, React, Objective C, Kotlin, or Swift.
• Provide security guidance to developers by establishing secure coding standards and guidelines.
• Support security standards by creating templates and patterns to improve security program adoption and efficiency.

Required Skills

• Minimum 8 years of professional IT work experience, including 3+ years of software development.
• 3+ years of software development experience using Java and JavaScript.
• 3+ years applying OWASP Secure Coding Practices and understanding common web application security vulnerabilities.
• Experience with Application security scanning tools and CI/CD processes (e.g., Jenkins).
• Proficiency in Python scripting.
• Experience with DevSecOps and Secure SDLC principles.
• Familiarity with Java, React, Objective C, Swift, and Kotlin.
• Experience with application build environments such as Jenkins, Gradle, or Maven.

Preferred Skills

• Experience with Kubernetes or Docker for container orchestration.
• Knowledge of security tools like Burp Suite, Fortify, or Checkmarx.

Key Skills

Education

Any Graduate