Description

You will lead the Application Security Testing Program, identifying vulnerabilities through penetration testing and automated scanning.

Responsibilities

• Conduct software security testing and penetration testing to identify bugs, coding errors, and defects.
• Introduce automated testing of fixed vulnerabilities into CI/CD processes.
• Develop application-specific threat models to identify design flaws and provide guidance on risks and controls.
• Review and inspect source code to advise developers on vulnerability remediation.
• Design strategy, standards, and architecture for security aspects of the SDLC, including mobile, web services, cloud, and DevOps.

Required Skills

• 7+ years of related experience in web application penetration testing and software development/testing.
• Bachelor’s degree in Computer Science, Computer Engineering, or a closely related IT field.
• Expert knowledge of application vulnerability types, attack vectors, and remediation approaches.
• Expertise in DAST solutions and techniques, with familiarity in SAST, IAST, and RAST.
• Experience with continuous delivery and continuous integration workflows.
• Solid understanding of secure code reviews, threat modeling, and architectural risk analysis.
• Knowledge of web application full-stack architecture and network models.
• Experience leading the creation and adoption of enterprise security testing tools.
• Certifications: CISSP, GPEN, GWAPT, OSCP, or CEH.

Preferred Skills

• Java programming skills, including knowledge of JSSE and security features.
• Experience with .NET, ASP, or C#.
• Working knowledge of Java development environments and tools such as Eclipse, Spring, Jenkins, Maven, Jira, and Selenium.

Key Skills

Education

Bachelor’s Degree