Description

Must-Have Skills:

Security Engineering – 4+ Years

Web Application Security – 3+ Years

Java / Python Scripting

Bash Scripting

OWASP Security Standards and Vulnerability Assessment

Cross-Site Scripting (XSS)

SQL Injection and SQL-Related Security Vulnerabilities

Cross-Site Request Forgery (CSRF)

Web Application Security Testing and Penetration Testing

Burp Suite, WebInspect, and/or OWASP ZAP

Application Security Compliance Tickets and Remediation

Kubernetes, Containers, and Docker

AWS Experience – Minimum 1 Year

Security Risk Assessment and Risk Mitigation

Strong Written and Verbal Communication Skills

Preferred Experience:

Secure Software Development Lifecycle (SSDLC)

Security Testing Integration into CI/CD Pipelines

Web Application Vulnerability Scanning and Remediation

Security Compliance and Risk Management

Collaboration with Engineering, Development, QA, and Security Teams

Security Awareness and Compliance Education Throughout the Development Lifecycle

Roles and Responsibilities:

Assess security risks and drive mitigation for critical web applications.

Partner with engineering leaders, developers, QA engineers, and security teams to strengthen application security.

Conduct web application security testing, vulnerability scanning, and penetration testing.

Use security tools to identify, investigate, and remediate application vulnerabilities.

Manage application security compliance tickets and track remediation activities.

Support secure application development across the software development lifecycle.

Contribute to security standards, compliance activities, and team education

Key Skills

Education

Bachelor's degree