Description

You will secure the software development lifecycle by identifying vulnerabilities and guiding remediation efforts.

Responsibilities

• Perform code reviews and analyze static analysis results to provide secure coding guidance to development teams.
• Develop and support security tools and systems built by the Secure Software Engineering and Application Security teams.
• Communicate security concepts and best practices to development teams, business units, and diverse audiences.
• Mentor team members by delegating programming and testing tasks and monitoring performance.
• Review and update security processes, procedures, policies, and technical documentation.

Required Skills

• 5+ years of experience with Web Applications, Web Services, and Service Oriented Architectures.
• 5+ years of experience in two or more of these languages: Go, Java, Python, C++, or C#.
• 5+ years of experience identifying and remediating software security defects.
• 5+ years of experience with SCA, SAST, DAST, and their integration into development pipelines.
• 5+ years of experience with the OWASP project, OWASP Top 10, or SANS 25.
• Strong written and spoken English communication skills (B2 minimum).
• Bachelor's degree in Computer Science, Systems Engineering, or equivalent experience.

Preferred Skills

• Cloud certifications in GCP, AWS, or Azure.
• Experience with Static Analysis tools such as Fortify, Veracode, or Checkmarx.
• Experience with Web and Application Servers including Apache, Tomcat, JBoss, or IIS.
• Relevant security certifications like CSSLP, GSSP, CASE, GWEB, GREM, or CEH.

Key Skills

Education

Any Graduate