Description

You will own the integration of security practices across the entire software development lifecycle.

This role is on-site.

Responsibilities

• Design, implement, and maintain security controls within CI/CD platforms including GitHub Actions, Jenkins, GitLab, and Azure DevOps.
• Automate SAST, DAST, SCA, and container image scanning within build and release pipelines.
• Design, deploy, and tune Web Application Firewall (WAF) rules and API security protections.
• Conduct API risk assessments and facilitate threat modeling for applications, APIs, and delivery pipelines.
• Promote secure API design patterns and integrate security practices into the SDLC.

Required Skills

• 5+ years in Application Security, Product Security, or Secure Software Development.
• Hands-on experience securing CI/CD pipelines and source repositories.
• Strong background in cloud security with AWS, Azure, or GCP platforms.
• Proficiency in Application Security principles and CI/CD Pipeline Security.
• Knowledge of API Security implementation and Static Application Security Testing (SAST).
• Experience with Dynamic Application Security Testing (DAST).
• Proficiency in Python and Java.

Preferred Skills

• Experience with SBOM generation and SCA integration into CI/CD workflows.
• Knowledge of runtime protection tools such as RASP and container EDR.

Key Skills

Education

Any Graduate