-Conduct security assessments to identify threats and vulnerabilities.
-Develop processes and automation to detect vulnerabilities and misconfigurations at scale.
-Design and lead the implementation of SDLC practices including code reviews, static/dynamic code analysis and vulnerability assessments.
-Design, develop, and deploy automated security scans, tests, and controls within the CI/CD pipeline to proactively identify and mitigate vulnerabilities.
-Implement and manage Software Bills of Materials (SBOMs) with integrity verification mechanisms (e.g., checksums) to ensure the deployed software components are authentic and untampered.
-Lead efforts around secure development training.
WHAT YOU'LL DO4+ years of web application security experience.
Passion for application/product security and learning.
Demonstrated strong understanding of application security frameworks (e.g., OWASP) and secure software development lifecycle (SDLC) methodologies, including familiarity with relevant NIST guidelines.
Prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws.
Familiarity with dynamic and static application security tools.
Strong understanding of security principles and best practices for securing the end-to-end customer experience, including login mechanisms, browser security, and the protection of customer data.
Experience in threat modeling of services and applications of web applications.
The ability to effectively partner and communicate with technical stakeholders.
WHAT YOU'LL NEEDDISCLOSURE
Our company provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.
(Colorado & California Only*): The annual posted salary range is of $123,000.00 - $150,000.00 This base pay is for illustrative purposes only and will be determined based on skills and experience comparable to the job requirements. This position may be eligible for additional compensation and benefits including but not limited to: incentive compensation; health benefits; retirement benefits; life insurance; paid time off; parental leave and benefits; and other employee perks and benefits.
*Note: Disclosure as required by sb19-085 (8-5-20) of the minimum salary compensation for this role when being hired in California & Colorado.
