Description

Lead application security initiatives and manage risk across the software development lifecycle.

This role is on-site.

Responsibilities

• Own the implementation and integration of remediation strategies for OWASP Top 10 and CWE risks.
• Manage application security testing tools including SAST, DAST, and Open Source Vulnerability Scanning.
• Drive threat modeling and SSDLC processes within product development and solution teams.
• Execute infrastructure security tasks including IDS/IPS, firewall management, SIEM, and server/OS hardening.

Required Skills

• 7+ years of experience in application security roles with leadership responsibilities.
• 5+ years of experience in enterprise technology environments covering operations, networking, or infrastructure architecture.
• 3+ years of experience in Web Application Security, SSDLC, and Threat Modeling.
• 3+ years of experience in a Security Operations Center or Continuous Monitoring role.
• Hands-on development experience in Java, C#, or C++.
• Deep understanding of OWASP Top 10 and CWE.
• Experience with SonarQube, Snyk, Qualys, and Wiz.
• Hands-on skills in transport and at-rest encryption for file systems, databases, and data persistence.
• Experience implementing SOX, PCI, ISO, NIST 800-53, or NIST CSF frameworks.

Preferred Skills

• Security credentials from ISC2, SANS, or ISACA.
• Bachelor's degree in Information Systems, Engineering, Computer Science, or Information Security.

Key Skills

Education

Any Graduate