This role focuses onidentifying, analyzing, and mitigating application security vulnerabilitiesthroughout the SDLC. It supports a broader?Shift Left? cybersecurity strategy, ensuring security is integrated early in development and reinforced through DevSecOps practices.
Key Responsibilities:
Application Security & Testing
- Perform security testing:SAST, DAST, IAST, mobile security, and dynamic testing
- Analyze vulnerabilities and recommendsecure coding fixes
- Demonstrate vulnerabilities to development teams
- Drive remediation efforts to closure
DevSecOps & Tooling
- Work within CI/CD pipelines using tools such as:
- Jenkins, GitLab, GitHub Actions, TeamCity
- Checkmarx, GitHub Advanced Security, Burp Suite
- Integrate security controls into development workflows
WAF & Security Controls
- LeadWeb Application Firewall (WAF)deployment for new and existing apps
- Implement application security policies, controls, and standards
Collaboration & Enablement
- Partner with development, platform, and supplier teams
- Provideclear remediation guidance
- Train teams on secure coding and application security practices
- Develop training materials
Assessment & Reporting
- Conduct security assessments using standard tools
- Track and report:
- Risks
- Milestones
- Deliverables
- Status updates
- Recommend strategies based on application risk posture
This role is based in Auburn Hills, MI and is required to be on-site in our HQ building 5 days per week.
Never miss an opportunity! Create an alert based on the job you applied for.
