Description

You own the security posture across web, mobile, and cloud applications.

This role is remote.

Responsibilities

• Perform manual and automated security assessments of web, mobile, and cloud applications.
• Embed security into the SDLC by collaborating with development and engineering teams (DevSecOps).
• Conduct secure code reviews, threat modeling, and risk assessments to identify application design weaknesses.
• Implement and manage application security tools including SAST, DAST, SCA, and IAST.
• Monitor, triage, and respond to application-layer vulnerabilities and incidents.

Required Skills

• 5+ years of experience in application security, secure software development, and penetration testing.
• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Strong understanding of web technologies including HTML, JavaScript, Python, and REST APIs.
• Experience integrating security tools into CI/CD pipelines for automated testing.
• Familiarity with OWASP Top 10, CWE, CVE, and secure coding practices.
• Knowledge of cloud environments such as AWS, Azure, and GCP and their security features.
• Experience within Agile and DevOps environments.

Preferred Skills

• Strong ability to collaborate with technical and non-technical stakeholders.

Key Skills

Education

Bachelor's degree