Design, implement, and maintain application security processes and tooling such as SAST, SCA, containers, etc;
Collaborate with software developers and system administrators to review and improve the security architecture of new and existing applications, systems, and code. Familiarity with threat modelling, design reviews are helpful;
Conduct regular security assessments, vulnerability scans, and web application scanning. Work with engineering teams on notification, remediation, and patching strategies;
Monitor security events, analyze logs, and generate reports to identify suspicious activities, potential threats, and security breaches;
Establish and enforce security policies, standards, and guidelines in alignment with industry best practices, legal requirements, and internal security policies;
Design, implement, and maintain security infrastructure components in AWS and Azure such as Security Hub, Inspector, Config, Defender for Cloud.

Requirements

5+ years as a Security Engineer or in a similar role, demonstrating hands-on experience in implementing, and improving a security program;
Strong knowledge of security protocols, cryptography, and common security technologies;
Ability to automate security tasks and integrate with various CI/CD tooling and processes;
Experienced with one or more scripting languages and reading basic scripts (Python, C#, PowerShell, Bash, or etc.);
Comfortable with writing pipelines for automation tasks (Jenkins, AzDO, GitLab, GitHub);
Strong familiarity writing IaC (CDK, CloudFormation, Terraform) with experience in deploying cloud workloads securely in either AWS or Azure and monitoring them for threats;
Excellent problem-solving and analytical skills to identify and address security vulnerabilities effectively;
Strong communication and interpersonal skills to collaborate with cross-functional teams and articulate complex security concepts to non-technical stakeholders;
Degree or diploma in relevant field or equivalent work experience.

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

application securitySASTSCAthreat modellingvulnerability scansweb application scanningsecurity protocolscryptographyscripting languagesIaC

problem-solvinganalytical skillscommunication skillsinterpersonal skills