Description

Conduct deep technical security audits and vulnerability assessments for web and mobile applications, covering APIs, containers, and cloud platforms.

This role is on-site.

Responsibilities

• Analyze HTTP request/response headers and RESTful APIs using browser development tools.
• Identify and remediate vulnerabilities including OWASP Top 10, XSS, Injection, SSRF, CSRF, and XML entity attacks.
• Evaluate API security implementations involving JWT, OAuth, OIDC, and PKCE.
• Assess security within containerized environments and cloud development platforms.
• Implement secure coding practices and security automation within DevSecOps workflows.

Required Skills

• 5+ years of total IT experience.
• 3+ years implementing security guidance such as OWASP Top 10, SANS, CERT, CWE Top 25, or Cloud Security Alliance.
• 3+ years of hands-on experience building and deploying secure distributed web and mobile applications.
• 3+ years of experience with networking, infrastructure, and security automation.
• Proficiency with application security scanning tools including SAST, DAST, SCA, ASOC, and Container/Cloud security.
• Experience with compiled and interpreted languages: Angular, React, Node.js, Java, Spring Boot, .NET, or IBM WebSphere.
• Knowledge of cloud platforms: Azure, AWS, or GCP.
• Understanding of web and API replay attacks.

Preferred Skills

• Experience with Coverity, BlackDuck, STRM, or Fortify.

Key Skills

Education

Any Graduate