Design, guide, and assess security solutions in software projects
Perform assessments of software projects to identify security issues
Guide teams to effective remediations
Collaborate closely with internal teams and customers to ensure WEX operates in a secure and compliant manner
Mentor other engineers & architects on your team and other teams both technically and professionally
Champion a shift-left and DevSecOps approach to security
Perform manual and automated secure code reviews, assisted with commercial static and dynamic application security scanning tools (SAST, DAST, SCA, etc)
Conduct web application and mobile app penetration testing
Write comprehensive reports including assessment-based findings, outcomes and recommendations for security enhancement.

Requirements

3-5+ years of progressive experience in software development
C#, Java, Go or Python preferred
3+ years experience with software security or information security
2+ years experience with application and container security tools such as SAST, DAST, SCA, IaC scanning and container image scanning
Very familiar with common application security issues, ie OWASP Top10
Able to troubleshoot security issues within a complex on-prem and multi-cloud environment
A degree in Business, Computer Science or equivalent combination of education and relevant experience.
Have experience working closely with many teams across departmental and business unit boundaries
Can commit and deliver on very specific project/delivery timelines with minimal supervision
Have excellent communication skills, both written and verbal.

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

C#JavaGoPythonSASTDASTSCAIaC scanningcontainer image scanningpenetration testing

Soft Skills

mentoringcollaborationcommunicationtroubleshootingproject managementleadershipproblem-solvingadaptabilitytime managementteamwork