Description

You will partner with developers to conduct application security assessments and mitigate risks throughout the SDLC.

Responsibilities

• Perform application code reviews and provide remediation recommendations to developers.
• Conduct architecture reviews, threat modeling, and risk-based security assessments.
• Design and assess SaaS, IaaS, and virtualization technologies including AWS and VMware.
• Integrate security controls into CI/CD pipelines and optimize automated source code scanning rules.
• Write detailed reports covering root cause analysis and security summaries.

Required Skills

• 3+ years of experience in security or web application development.
• Proficiency in reading and debugging code in Java, JavaScript, C#, C, C++, or Objective-C.
• Strong understanding of OWASP Top 10 vulnerabilities.
• Knowledge of protocols including HTTP, SSL, LDAP, JDBC, Servlet/JSP, SQL, HTML, and XML.
• Experience with API security and build automation tools.
• Ability to perform application security assessments and review business requirements.
• Knowledge of Java application and server administration.

Preferred Skills

• Scripting experience with Python, Perl, Ruby, Bash, or PowerShell.
• CISSP or SANS certifications.

Key Skills

Education

ANY GRADUATE