Key Skills: Java, Threat Modeling, Application Security, SDLC, CICD, Secure Code Review, DAST, AWS, Cloud Security, Rest API, Containerization (Docker, Kubernetes), Azure Devops
Roles and Responsibilities:
- Provide application security guidance across application design, development, testing, and deployment activities.
- Conduct secure code reviews for Java applications, Spring Boot services, and REST APIs, and recommend practical remediation measures.
- Perform threat modeling and architecture reviews to identify application risks and establish secure design controls.
- Analyze DAST, penetration testing, vulnerability assessment, and software security findings; help teams prioritize and resolve issues.
- Promote DevSecOps practices by supporting automated security testing, vulnerability scanning, and security controls within delivery workflows.
Skills Required:
- 5 - 10 years of relevant experience in application security, secure software development, or DevSecOps.
- Hands-on application security experience across the software development lifecycle, with strong knowledge of secure development practices.
- Strong Java and Spring Boot understanding, including the ability to assess application architecture and backend services.
- Practical experience performing secure code reviews and threat modeling for enterprise applications.
- Experience with DAST and interpreting security findings to drive vulnerability remediation.
Good to Have:
- Experience with cloud security across AWS or Azure DevOps environments.
- Understanding of REST API security and containerization technologies such as Docker and Kubernetes.
Education: Any Graduate or Postgraduate degree.