Lead Engineer - AppSec

Análisis del mercado

Gratis, tras iniciar sesión.

Postular

Sube tu CV: empleadores y reclutadores de distintos países que buscan tu perfil podrán contactarte directamente.

Descripción

Accountabilities - Lead application security practices: Act as the technical security reference for Product and Engineering teams, integrating security early in the software development lifecycle without unnecessarily slowing delivery. - Conduct threat modeling: Facilitate threat modeling sessions for new features and architectural changes, identifying potential attack paths, assessing risks, and recommending appropriate security controls before implementation. - Perform security reviews and testing: Review application code and conduct manual security testing across web, API, and mobile applications to identify vulnerabilities such as cross-site scripting (XSS), insecure direct object references (IDOR), server-side request forgery (SSRF), injection flaws, and access control weaknesses. - Strengthen automated security testing: Implement, maintain, and optimize Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets detection tools within CI/CD pipelines. - Manage vulnerabilities end to end: Triage, prioritize, track, and coordinate remediation activities, helping developers understand findings and implement effective fixes. - Establish security standards: Develop secure coding guidelines, checklists, and best practices covering authentication, authorization, encryption, and personal data protection. - Improve security visibility and performance: Assess the current application security landscape,

Descripción completa, empresa y enlace para postular: después de iniciar sesión. Iniciar sesión

Los contactos del empleador (correo/teléfono/telegram) están ocultos en la vista previa pública. Envía tu CV para que los empleadores puedan contactarte directamente.