Description

Lead the application security testing program by identifying vulnerabilities through penetration testing, automated scanning, and threat modeling.

This role is on-site.

Responsibilities

• Conduct software security testing and penetration testing to identify bugs, coding errors, and defects.
• Develop application-specific threat models to identify design flaws and provide guidance on risks and controls.
• Review and inspect source code to advise developers on vulnerability remediation.
• Design strategy, standards, and architecture for security aspects of the SDLC, including mobile, web services, cloud, and DevOps.
• Introduce automated testing of fixed vulnerabilities into CI/CD processes.

Required Skills

• 7+ years of related experience in web application penetration testing and software development/testing.
• Bachelor’s degree in Computer Science, Computer Engineering, or a closely related IT field.
• Expert knowledge of application vulnerability types, attack vectors, and remediation approaches.
• Expertise in DAST solutions and techniques, with familiarity in SAST, IAST, and RAST.
• Experience with continuous delivery and continuous integration workflows.
• Solid understanding of secure code reviews, threat modeling, and architectural risk analysis.
• Knowledge of web application full-stack architecture and network models.
• Experience leading the creation and adoption of enterprise security testing tools.

Preferred Skills

• Java programming skills, including knowledge of JSSE and security features.
• Experience with .NET, ASP, or C#.

Key Skills

Education

Bachelor’s Degree