Description

Lead application security engineering by integrating controls into the development lifecycle and managing vulnerability remediation.

Responsibilities

• Collaborate with vulnerability tooling teams to mature program activities and risk management.
• Provide security consultation for risk remediation, secure coding practices, and security reviews.
• Coordinate with vendors to customize third-party product capabilities to meet requirements.
• Configure and troubleshoot WAFs, load balancers, and API gateways.
• Create and review technical security documentation.

Required Skills

• 10+ years of hands-on software development experience in Java, Python, or similar stacks.
• 5+ years of experience in secure coding practices, security controls, and DevSecOps.
• 4+ years of vulnerability management experience using CVSS, CVE, and related scoring schemas.
• 3+ years of experience orchestrating risk and control-related resolutions across diverse departments.
• Strong understanding of application security, common networking ports, and protocols.
• Experience managing security for both cloud and on-premises projects.
• Ability to coordinate with both technical and non-technical stakeholders.

Preferred Skills

• Experience with AWS cloud, OWASP, and scripting/automation using Ansible or Terraform.
• Reporting and dashboard experience using PowerBI or MicroStrategy.
• Cybersecurity certifications such as CISSP, CISM, CEH, or OSCP.

Key Skills

Education

Any Graduate