Description

You will manage the end-to-end Secure Software Development Life Cycle for web and cloud-based applications.

This role is on-site.

Responsibilities

• Execute all stages of the SDLC, including requirement gathering, risk assessment, architecture risk analysis, and threat modeling.
• Implement data validation and sanitization protocols to secure user inputs and open-source libraries.
• Develop secure coding guidelines and provide security awareness training to co-developers.
• Build and manage production, testing, and sandbox environments for web and cloud applications.
• Perform security gap analysis, secure assessments, and configuration audits using SAST and DAST methodologies.

Required Skills

• Experience with Checkmarx and SonarQube.
• Proficiency with Bandit scans and HCL AppScan.
• Hands-on use of Burp Suite and Rapid7.
• Background as an Information Security Analyst or Software Engineer.
• Experience performing Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Ability to create functional, logical, physical design, and business continuity documentation.
• Master's degree in Cybersystems and Information Security, Engineering, or a related field.
• At least one year of professional experience in a security or software engineering role.

Key Skills

Education

Master's degree