Description

You will own application security across the full software development lifecycle, embedding security practices into cloud-native DevOps environments.

Responsibilities

• Conduct vulnerability assessments, penetration testing, and secure source code reviews for web, mobile, and cloud platforms.
• Perform application security reviews for APIs, middleware, and frontend components in Java, Python, and Node.js.
• Automate security checks and technical tasks within CI/CD pipelines using APIs and security tools.
• Execute SAST and DAST activities to strengthen security throughout the SDLC and simulate real-world attacks.
• Design and review application security architectures, blueprints, and low-level designs covering data protection and authentication.

Required Skills

• 5+ years of experience in application security or cybersecurity engineering.
• Strong hands-on experience with Application Security Testing, SAST, and DAST tools.
• Proven expertise in Secure SDLC and DevSecOps practices within cloud-native environments.
• Experience conducting Penetration Testing across web, mobile (iOS/Android), and cloud platforms.
• Ability to review code and architectures for Java, Python, and Node.js applications.
• Knowledge of secure coding standards, threat modeling, and incident response.
• Experience working in DevOps-only environments.

Preferred Skills

• Experience defining and promoting secure coding guidelines and standards.
• Background in security architecture design and blueprints aligned with business objectives.

Key Skills

Education

Any Graduate