100% remote role
W2 Candidates only
Responsibilities
- Design and implement security best practices and standards across varied engineering teams and environments.
- Implement and conduct code reviews with a combination of static testing, manual reviews, and dynamic analysis / pen-testing.
- Conduct threat modeling, identify & drive risk decisions, and influence technical designs and architectures.
- Engage with developers to initiate and support remediation.
- Perform security reviews of new services and features.
- Build tools to simplify and automate Vulnerability Management processes.
- Provide engineering designs to mitigate security vulnerabilities in new software solutions.
- Design and implement tooling and automation for application security (e.g. SAST/DAST in CI/CD)
- Perform regular security testing as well as code reviews to improve software security.
- Maintain technical documentation related to software security.
- Ensure software security at all levels of architecture.
Requirements
- Bachelor's Degree in Computer Science, Engineering, Network Security, or related field with 10+ years related industry experience
- Industry certifications such as OSCP, CCSP, SSCP, CISSP
- Develop and implement advanced security techniques according to the technical architecture of the organization
- Perform regular application security testing as well as code reviews to improve software security.
- Well versed in Identity security issues and applications
- Troubleshoot and debug issues as soon as they arise.
- Maintain technical documentation related to software security.
- Provide engineering solutions to mitigate security vulnerabilities in new software initiatives.
- Ensure software security at all levels of architecture.
- Continuous alignment with the latest tools and advanced industry practices for software security.