Responsibilities
- Partner with development teams to embed security practices that enable safe, scalable, and high-quality product delivery
- Design and implement automated security solutions within CI/CD pipelines to strengthen application security posture
- Integrate and optimize application security testing tools (SAST, DAST, SCA, MAST) across multiple development environments
- Influence secure architecture decisions by contributing to the design and implementation of modern applications and platforms
- Lead security assessments, threat modeling, and vulnerability analysis to proactively identify and reduce risk
- Develop and enhance reusable security services, tooling, and automation frameworks that support enterprise-wide DevSecOps maturity
- Provide expert guidance to engineering teams on secure development practices and emerging security trends
- Strengthen collaboration across cross-functional teams to promote a culture of shared security ownership
- Ensure alignment with regulatory and compliance requirements (e.g., HIPAA, PCI-DSS, GDPR) where applicable
- Improve security operational efficiency, performance, and cost optimization across application environments
Requirements
- 8+ years of experience in cybersecurity, with a focus on application or product security
- Proven experience integrating and automating security tools in CI/CD pipelines
- Strong understanding of secure software development principles and modern SDLC practices
- Hands-on experience with application security testing tools (SAST, DAST, SCA, MAST)
- Experience designing and implementing security solutions across complex development environments
- Familiarity with cloud platforms (AWS, Azure, or Google Cloud) and securing cloud-native applications
- Strong interpersonal skills with the ability to influence and collaborate across engineering teams
- Demonstrated ability to work effectively in Agile environments
#J-18808-Ljbffr