Description

You will partner with software development teams to implement secure coding practices and mature secure software development lifecycles.

Responsibilities

• Conduct Dynamic, Static, and Software Composition Analysis (DAST, SAST, SCA) assessments.
• Implement security patterns and automation tools to secure configuration, verification, and compliance.
• Collaborate with front-end and back-end developers to build and secure on-premises and cloud-based applications.
• Lead efforts to automate authorization and risk mitigation within distributed systems.

Required Skills

• 5+ years of total IT experience.
• 3+ years implementing secure coding practices including OWASP Top 10, SANS, CERT, CWE Top 25, and Cloud Security Alliance.
• 3+ years working with Angular, React, Node.js, Java, Spring Boot, Oracle JBoss, or .NET stacks.
• 3+ years in DevSecOps, networking, infrastructure, and security automation.
• 3+ years building and deploying secure distributed web and mobile applications.
• Deep understanding of SSRF, CSRF, XML entity attacks, and API security.
• Hands-on experience with cloud environments including Azure, AWS, or GCP.
• Proficiency with browser development tools for inspecting HTTP request/response headers and RESTful API calls.
• Knowledge of JWT, OAuth, OIDC, and PKCE.
• Must be a United States Citizen able to pass a CJIS background check.

Preferred Skills

• Experience with Coverity, BlackDuck, CodeDX, or Fortify.
• Familiarity with ASOC and Container security scanning.

Key Skills

Education

Any Gradute