Description

Own the security posture of cloud-native applications and integrate security into the development lifecycle.

Responsibilities

• Integrate security practices into the SDLC by collaborating with development teams at every phase.
• Conduct regular security assessments, including penetration testing, code reviews, and vulnerability scanning.
• Implement secure coding guidelines and manage vulnerability assessments.
• Assist with incident response, investigating and mitigating application-level security incidents.
• Provide security training to developers to promote secure coding practices.

Required Skills

• 6+ years of professional experience in application security.
• In-depth knowledge of OWASP Top 10 and common application vulnerabilities.
• Hands-on experience with AWS security services including IAM, WAF, and KMS.
• Proficiency with static analysis (SAST), dynamic analysis (DAST), and open-source security testing frameworks.
• Practical experience with DevSecOps principles and CI/CD pipeline integration.
• Strong understanding of software development methodologies and the SDLC.
• Experience performing application penetration testing.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

Preferred Skills

• Security certifications such as CISSP, CSSLP, or CEH.

Key Skills

Education

Any Graduate