Preferred candidate profile
Strong experience in Application Security, Secure SDLC, and DevSecOps practices.
Hands-on expertise with SAST, DAST, SCA, IAST tools such as SonarQube, Checkmarx, Veracode, Fortify, or Snyk.
Experience in application vulnerability assessment, secure code review, and remediation of security findings.
Positive understanding of OWASP Top 10, API Security Top 10, threat modeling, and penetration testing concepts.
Knowledge of API security, cloud security (AWS/Azure/GCP), and CI/CD security integration.
Ability to work with development teams to implement secure coding practices and security controls.
Familiarity with authentication protocols, vulnerability management, compliance requirements, and application security best practices.