Description

Secure internally developed systems, applications, and infrastructure by integrating security testing into the DevSecOps lifecycle.

Responsibilities

• Conduct SAST, DAST, and SCA using tools like VeraCode to identify vulnerable methods and residual risk.
• Design, implement, and maintain Cloud DevSecOps processes across multiple technical organizations.
• Guide development teams in integrating new services into CI/CD pipelines and troubleshooting automated deployments.
• Manage remediation efforts by characterizing threats and presenting findings to various department levels.
• Perform security reviews of software designs and conduct assessments against web applications and APIs.

Required Skills

• 5+ years of professional experience in application security, penetration testing, or secure software development.
• B.S. degree in Computer Science, Computer Engineering, Information Assurance, or a related field.
• Hands-on experience with DevSecOps technologies including GitLab/GitHub, Jenkins, Tekton, Ansible, Docker, and Kubernetes.
• Experience securing containers within ROSA, Tekton, and OpenShift pipelines.
• Proficiency in software development languages including Java, C#.NET, and JavaScript.
• Working knowledge of cloud infrastructure, specifically engineering software within AWS.
• Deep understanding of the OWASP Top 10 and vulnerability risk assessment.
• Experience with Sonatype Nexus Firewall and lifecycle tools to manage 3rd-party component risk.
• Ability to troubleshoot connectivity and operational issues within container runtime environments.

Preferred Skills

• Familiarity with AWS Well-Architected Framework or TOGAF principles.
• Experience with container security tools such as Palo Alto Prisma, Aqua, or Wiz.

Key Skills

Education

B.S. degree in Computer Science