Description

You will manage the end-to-end Secure Software Development Life Cycle for web and cloud-based applications.

Responsibilities

• Execute all SDLC phases including planning, risk assessment, architecture risk analysis, design, threat modeling, and maintenance.
• Implement input validation and data sanitization protocols to secure data processing.
• Conduct vulnerability assessments on open-source libraries and perform security gap analyses.
• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using tools such as Checkmarx, SonarQube, Bandit, HCL AppScan, Burp Suite, and Rapid7.
• Build and configure production, testing, and sandbox environments for web and cloud applications.
• Develop secure coding guidelines and provide security awareness training to co-developers.

Required Skills

• Experience with architecture risk analysis and threat modeling.
• Proficiency in secure software design and data processing.
• Hands-on experience with SAST and DAST methodologies.
• Knowledge of Checkmarx, SonarQube, Bandit, HCL AppScan, Burp Suite, and Rapid7.
• Ability to create functional, logical, physical design, and business continuity documentation.
• Experience in secure configuration and application assessment.
• Master’s degree in Cybersystems and Information Security, Engineering, or a related field.
• Minimum of one year of experience as an Information Security Analyst, Software Engineer, or related role.

Key Skills

Education

Master’s in Cybersystems and Information Security, Engineering