Description

Lead application security engineering by integrating controls into the development lifecycle and managing vulnerability remediation.

Responsibilities

• Collaborate with vulnerability tooling teams to mature program management and remediation activities.
• Provide security consultation for risk remediation, secure coding practices, and security reviews.
• Coordinate with vendors to customize third-party product capabilities to meet specific requirements.
• Work with leadership, infrastructure, and DevOps teams to assess risks and implement technical solutions.
• Write and review technical security documentation.

Required Skills

• 7+ years of technical experience in software development using Java, Python, or similar stacks.
• 5+ years of experience with secure coding practices, security controls, and DevSecOps.
• 4+ years of experience in vulnerability management risk scoring, including CVSS and CVE.
• 3+ years of experience orchestrating risk and control resolutions across diverse departments.
• Cybersecurity certifications such as CISSP, CISM, CEH, or OSCP.
• Strong understanding of common networking ports, protocols, and application security elements.
• Experience coordinating with both technical and non-technical stakeholders.
• Use Python or other scripting to fetch data from security vendor tools via REST APIs.
• Configure and troubleshoot WAFs, load balancers, and API gateways.

Preferred Skills

• Experience with AWS cloud or other public cloud environments.
• Scripting and automation experience using Ansible or Terraform.
• Reporting and dashboard experience using PowerBI or MicroStrategy.

Key Skills

Education

Any Graduate