Applications Security Specialist - Remote

View full description

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field or equivalent years of experience preferred.
• 8-10 years Software design and development experience preferred.
• 8+ years working with code scanning tools (e.g., SAST, DAST, SCA) preferred.
• 8+ years of knowledge in security concepts and SDL practices preferred.
• 8+ years familiarity with security frameworks, standards, and regulations (e.g., OWASP Top 10/ASVS, NIST, GDPR) preferred.
• 8+ years understanding of secure coding practices and common vulnerabilities (e.g., SQL injection, XSS, CSRF) preferred.

Responsibilities:

• Conduct code scanning and analysis to identify vulnerabilities in the application code.
• Conduct threat modeling sessions with developers to anticipate and address potential security risks during the application development process.
• Review code for security flaws and provide actionable feedback to development teams.
• Collaborate with developers to integrate secure coding practices into the software development lifecycle.
• Assist in the creation and maintenance of security documentation, policies, and procedures.
• Meet regularly with Development teams to address compliance, SDLC, and OWASP standards.
• Stay updated on the latest security trends, threats, and compliance requirements.
• Document scan results and follow up with corrective action plans.
• Create remediation plans with development teams based on security scanning tools output.
• Review architectural and data-flow diagrams for vulnerabilities.