How You’ll Contribute
As a Consultant Product Security, you will guide the organization in designing and implementing secure software development practices by collaborating with development, Dev Ops, and operations teams to embed security throughout every phase of the software development lifecycle (SDLC).
Your responsibilities will include advising on application security scans, developing tool run books, and driving automation initiatives to enhance Dev Sec Ops programs. You will also recommend best practices and process improvements to improve the efficiency of the overall security program.
Serving as a security subject matter expert, you will mentor junior engineers and provide expert guidance in the product security program by performing comprehensive security reviews and coordinating external penetration test activities, including threat modeling and application security validation.
The ideal candidate will have extensive experience consulting with software development teams, deep knowledge of security-by-design and privacy-by-design principles,
and familiarity with industry standards such as NIST CSF, SSDF, and OWASP. You will also evaluate and recommend security tools and platforms based on detailed assessments of control gaps and organizational needs.. Your responsibilities include:
Define and enforce secure coding standards and best practices.
Hands on experience to perform Threat Modeling and source code analysis across various development languages (preferably in. NET and JAVA)
Design and implement secure CI/CD pipelines with integrated security controls.
Automate security testing (SAST, DAST, IAST, SCA, container scanning) in the SDLC process.
Evaluate and integrate security tools and platforms
Lead Dev Sec Ops program in collaboration with Dev Ops, Operations and Engineering teams
Build automation focused on efficiency (E.g. increase triaging efficiency, manage false positives etc.)
Leverage ASPM and build workflows and reports
Evaluate and integrate s