Description

Own application security across the SDLC, integrating testing and automation into CI/CD pipelines and developer workflows.

This role is on-site.

Responsibilities

• Embed security into SDLC, CI/CD pipelines, and developer workflows.
• Perform and oversee SAST, DAST, SCA, and API security testing.
• Leverage AI-based code scanning tools to enhance vulnerability detection and reduce false positives.
• Partner with developers to remediate vulnerabilities and improve secure coding practices.
• Conduct threat modeling and security reviews for applications and APIs.

Required Skills

• 7+ years of experience in application security, DevSecOps, or secure software engineering.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with application security tools (SAST, DAST, SCA).
• Experience integrating security into CI/CD pipelines.
• Knowledge of GitHub Advanced Security.
• Proficiency in at least one programming language (Python, Java, or JavaScript).

Preferred Skills

• Experience implementing and managing AI-powered code scanning solutions.
• Ability to leverage AI/ML capabilities to identify complex vulnerability patterns.

Key Skills

Education

Bachelor's degree