Join a leading cybersecurity team focused on preventing attacks and protecting valuable assets. This role emphasizes proactive risk management by embedding cyber risk into strategy development for effective information and technology risk management. Explore how we help organizations achieve security, vigilance, and resilience.

This position is responsible for the crucial task of validating security controls and remediation measures implemented by Development and DevOps teams. The goal is to ensure that vulnerabilities are thoroughly addressed and that applications consistently meet Secure SDLC and compliance requirements.

Key responsibilities include validating security controls and vulnerability remediations across diverse applications and cloud environments. You will verify critical elements like authentication, authorization (RBAC/ABAC), input validation, secure configurations, and API security controls. Re-testing vulnerabilities and confirming the effectiveness of remediations through positive, negative, and edge-case testing scenarios is essential. Performing security regression testing to ensure fixes do not introduce new risks is also a core duty. Additionally, you will review and validate findings from SAST, DAST, SCA, and Threat Modeling activities, and collaborate closely with Development, DevOps, Security, and QA teams throughout the Secure SDLC lifecycle. Maintaining meticulous records of security testing evidence, reports, and vulnerability tracking is also expected.

We are seeking a hands-on Application Security/DevSecOps professional with demonstrated experience in security control verification, remediation validation, and secure application delivery. The ideal candidate will be adept at partnering with engineering teams to significantly strengthen the overall security posture. A strong foundation in Secure SDLC, OWASP Top 10 principles, Threat Modeling, Application Security Controls, DevSecOps Practices, and Vulnerability Management is required. Expertise in SAST, DAST, SCA validation, security control verification, remediation testing, and REST API security testing is essential. Familiarity with tools such as SonarQube, Coverity, Black Duck, Burp Suite, OWASP ZAP, Jira, and Azure DevOps is expected. Experience with Azure Cloud Security is preferred, while AWS/GCP knowledge is a plus. Cloud Security, IAM, Data Protection, and Cryptography are key areas. Experience with CI/CD Security and DevSecOps pipelines, along with scripting languages like Python, Bash, or JavaScript, are highly desirable. Security Design Reviews and Threat Model Validation experience will be advantageous. Relevant certifications like CEH, CISSP, CISM, or Microsoft Azure Security Engineer Associate are preferred.