Description

You will lead application security initiatives by integrating security protocols directly into the development lifecycle.

Responsibilities

• Conduct vulnerability assessments, penetration testing, and secure code reviews.
• Guide development teams in implementing secure coding practices based on OWASP Top 10.
• Manage Software Composition Analysis (SCA) to identify vulnerabilities in open-source and third-party components.
• Integrate SAST and DAST tools into CI/CD pipelines for automated security checks.
• Secure applications and workloads across AWS, Azure, or GCP environments.

Required Skills

• 12+ years of experience in application security.
• Expertise in SAST/DAST tools including Veracode, AppSec, and Burp Suite.
• Proficiency with SCA tools such as Veracode and AppSec.
• Hands-on experience securing workloads on AWS, Azure, or GCP.
• Practical knowledge of Web Application Firewalls (WAF) and cloud-native security services.
• Experience with security frameworks and compliance standards including NIST, PCI-DSS, and GDPR.
• Ability to communicate complex security risks to technical and non-technical stakeholders.

Preferred Skills

• Scripting and automation experience using Python, Bash, or PowerShell.
• Certifications including CISSP, CEH, CCSP, or GWAPT.
• Experience mentoring junior engineers and leading security initiatives.

Key Skills

Education

Any Gradute