Description

What you will be doing:

• Partner with software development teams to identify, assess, prioritize, and remediate application security vulnerabilities.
• Integrate security practices and controls throughout continuous integration and continuous delivery pipelines and the broader software development lifecycle.
• Perform threat modeling and security architecture reviews to identify potential risks and recommend appropriate security controls.
• Review applications, code, and technical solutions from a security perspective, helping development teams make secure design and implementation decisions.
• Assess security risks and translate findings into clear, practical recommendations for technical and business stakeholders.
• Collaborate with development and technology teams to strengthen secure development practices and embed security into day-to-day engineering workflows.
• Apply strong information security fundamentals while contributing to the continued maturity of application security and DevSecOps practices.

What you will likely bring:

• 5+ years’ experience in information security, including strong hands-on depth in application security.
• Experience with DevSecOps and integrating security into continuous integration and continuous delivery pipelines.
• Experience working with code and partnering directly with software development teams to identify and remediate security vulnerabilities.
• Experience performing threat modeling, security architecture reviews, and risk assessments.
• Strong information security fundamentals, sound security judgment, and the ability to communicate recommendations clearly and build effective relationships with development teams.
   

What could set you apart:

• Information security certifications that demonstrate continued professional development and progression.
• Experience applying application security practices across different industries, technology environments, or software delivery models

Key Skills

Education

Any Graduate