Описание
Accountabilities
- Application and product security: Perform penetration testing and vulnerability assessments across web applications, APIs, cloud environments, and containerized applications. Identify, validate, prioritize, and communicate security findings, working with development teams to drive effective remediation.
- Threat modeling and secure design: Conduct threat modeling and security design reviews for new products, features, and applications, providing practical recommendations to reduce security risks from the outset.
- Secure SDLC and DevSecOps: Integrate security controls throughout the Software Development Lifecycle and collaborate with developers, architects, and DevOps teams to implement security-by-design principles.
- Security automation: Integrate and optimize security tools within CI/CD pipelines, support security automation initiatives, and contribute to policy-as-code practices.
- Application security testing: Execute and interpret results from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container security scanning, secret detection, and code scanning tools.
- Vulnerability management: Triage security findings, reduce false positives, assess risk based on business and technical impact, and coordinate remediation with engineering teams.
- Cloud and container security: Assess and strengthen the security of cloud-native applications, containerized workloads, Kubernetes envir
Полное описание, компания и ссылка на вакансию — после входа.
ВойтиКонтакты работодателя (email/phone/telegram) скрыты из публичного превью —
отправьте резюме, чтобы мы связали вас напрямую.