Description

Design and implement proactive application security frameworks, threat models, and secure design patterns for in-house, COTS, and SaaS solutions.

This role is on-site.

Responsibilities

• Integrate security controls into modern SDLCs and automate processes within CI/CD pipelines.
• Conduct application security assessments, threat modeling, and cloud architecture reviews.
• Influence stakeholders to correct security deficiencies in solution design and code.
• Mentor project teams and collaborate with developers and architects to secure designs.
• Translate technical security concepts into business risk language for non-technical audiences.

Required Skills

• 5+ years of experience in application security, software development, or architecture.
• In-depth knowledge of OWASP Top 10 and ability to communicate with developers.
• Experience with application security frameworks such as BSIMM and SAMM.
• Expertise in performing cloud architecture reviews and application risk assessments.
• Proven track record of integrating security controls into CI/CD pipelines.
• Experience working in highly regulated environments (HIPAA, HITRUST, PCI).
• Proficiency with Azure, AWS, or GCP configuration and secure migration.

Preferred Skills

• CISSP, CISM, GIAC, or Offensive Security certifications.
• Cloud Security Alliance certifications (CCSP, CCSK) or (ISC)2 credentials.

Key Skills

Education

Bachelor's degree