Description

Lead security automation and compliance efforts for distributed on-premises and cloud systems. Own the implementation of secure configuration patterns and DevSecOps workflows to mitigate risk and ensure continuous authorization.

Responsibilities

• Implement security patterns and orchestration tools to secure system configuration, verification, and compliance.
• Automate secure configuration and authorization processes for cloud and on-premises applications.
• Collaborate with front-end and back-end developers to mature software development and security practices.
• Partner with distributed teams to transform system building, authorization, and operation for continuous compliance.
• Deploy security automation workflows to identify and mitigate vulnerabilities in web and mobile applications.

Required Skills

• 5+ years of total IT experience with 10+ years in relevant security or engineering roles.
• 3+ years implementing security guidance including OWASP Top 10, SANS, CERT, CWE Top 25, and Cloud Security Alliance.
• 3+ years working with Angular, React, Node.js, Java, Spring Boot, IBM WebSphere, Oracle JBoss, or .NET stacks.
• 3+ years of experience in networking, infrastructure, and DevSecOps.
• 3+ years building and deploying secure distributed web and mobile applications.
• Deep understanding of OWASP vulnerabilities including XSS, Injection, SSRF, CSRF, and XML entity attacks.
• Proficiency with API security, JWT, OAuth/OIDC/PKCE, and web/API replay attacks.
• Experience with security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud).
• Technical knowledge of HTTP request/response headers for web and RESTful API calls.
• Cloud development experience in AWS, GCP, or Azure.
• United States Citizenship and ability to pass a CJIS background check.

Preferred Skills

• Experience with Coverity, BlackDuck, CodeDX, or Fortify.

Key Skills

Education

Not specified