Job Description
Responsibilities:
\n
- \n
- Design, implement, and maintain application security standards, secure coding requirements, and security controls across the Software Development Lifecycle (SDLC).
- Define and implement application and API security requirements, including secure architecture, authentication, authorization, and data protection controls.
- Establish and operationalize application security best practices, including threat modeling, secure design reviews, and vulnerability management processes.
- Configure, maintain, and optimize application security platforms and tools, including SAST, SCA, DAST, secret scanning, API security, and vulnerability management solutions.
- Translate application security policies, standards, and architectural requirements into scalable security controls, governance processes, automation, and developer-focused security solutions.
\n
\n
\n
\n
\n
\n
Requirements:
\n
- \n
- 3+ years of experience in Cybersecurity engineering
- Hands-on experience with application security testing tools such as SAST, SCA, DAST, secret scanning, API security, and vulnerability management platforms.
- Experience with Coverity, Black Duck, SonarQube, and GitHub Advanced Security (GHAS) or similar application security tools.
- Experience defining and implementing application and API security requirements, including authentication, authorization, encryption, data protection, and secure API design.
- Experience working with software development and engineering teams to identify, prioritize, remediate, and track security vulnerabilities.
- Strong understanding of CI/CD, source code management, DevSecOps practices, and automated security testing.
- Strong communication and collaboration skills with developers, architects, DevOps, security, and technology teams.
\n
\n
\n
\n
\n
\n
\n
\n
Education:
\n
- \n
- Bachelor s degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related field.
\n
\n