Lead Engineer - AppSec

Analityka rynku

Bezpłatnie, po zalogowaniu.

Aplikuj

Prześlij CV — pracodawcy i rekruterzy z różnych krajów, którzy szukają takiego profilu, będą mogli napisać do Ciebie bezpośrednio.

Opis

Accountabilities - Lead application security practices: Act as the technical security reference for Product and Engineering teams, integrating security early in the software development lifecycle without unnecessarily slowing delivery. - Conduct threat modeling: Facilitate threat modeling sessions for new features and architectural changes, identifying potential attack paths, assessing risks, and recommending appropriate security controls before implementation. - Perform security reviews and testing: Review application code and conduct manual security testing across web, API, and mobile applications to identify vulnerabilities such as cross-site scripting (XSS), insecure direct object references (IDOR), server-side request forgery (SSRF), injection flaws, and access control weaknesses. - Strengthen automated security testing: Implement, maintain, and optimize Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets detection tools within CI/CD pipelines. - Manage vulnerabilities end to end: Triage, prioritize, track, and coordinate remediation activities, helping developers understand findings and implement effective fixes. - Establish security standards: Develop secure coding guidelines, checklists, and best practices covering authentication, authorization, encryption, and personal data protection. - Improve security visibility and performance: Assess the current application security landscape,

Pełny opis, firma i link do aplikacji — po zalogowaniu. Zaloguj się

Kontakty pracodawcy (e-mail/telefon/Telegram) są ukryte w publicznym podglądzie. Wyślij CV — a pracodawcy będą mogli napisać do Ciebie sami.