Description

Lead application security initiatives to design, build, and implement security best practices across multiple engineering teams.

This role is remote.

Responsibilities

• Implement and enhance security automation within CI/CD pipelines.
• Maintain application security solutions and measure their effectiveness against strategic priorities.
• Develop secure coding guidelines and security training for engineers.
• Investigate security vulnerabilities and support incident response efforts.
• Research emerging threats and attack techniques to proactively secure applications.

Required Skills

• 8+ years of experience in application security, secure software development, or related fields.
• Hands-on experience with SAST, SCA, DAST, Secrets, and API security solutions.
• Deep understanding of security for containers, web, APIs, and cloud-native workloads.
• Proficiency with AWS, Azure, or GCP.
• Proficiency in at least one programming language: Python, Go, Java, or TypeScript.
• Strong knowledge of OWASP Top 10 and modern attack vectors.
• Excellent communication and presentation skills for diverse stakeholders.

Preferred Skills

• Application Security certifications such as OSCP, GWAPT, or GCPN.
• Experience with Threat Modeling.

Key Skills

Education

Any Graduate