Description

Own application security practices, integrate security into the SDLC, and secure AWS cloud-native infrastructure.

This role is on-site.

Responsibilities

• Develop and implement secure coding guidelines and vulnerability assessment processes.
• Integrate security controls into the SDLC, collaborating with development teams at each phase.
• Leverage AWS security services (IAM, WAF, KMS) to harden cloud-native applications and infrastructure.
• Conduct and oversee security assessments, including penetration testing, code reviews, and vulnerability scanning.
• Lead incident response for application security events and provide security training to engineering teams.

Required Skills

• 6+ years of professional experience in application security.
• Deep knowledge of secure coding practices, OWASP Top 10, and common application vulnerabilities.
• Hands-on experience with AWS security features, specifically IAM, WAF, and KMS.
• Proficiency in security tools including static analysis (SAST), dynamic analysis (DAST), and open-source testing frameworks.
• Strong familiarity with DevSecOps principles and integrating security into CI/CD pipelines.
• Experience conducting security assessments and penetration testing of applications.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

Preferred Skills

• Security certifications such as CISSP, CSSLP, or CEH.
• Strong understanding of software development methodologies and the SDLC.

Key Skills

Education

Any Graduate