Docker Container/Application Security Consultant

***Hybrid, 3 days onsite, 2 days remote***

*** Long Term Contract***

Responsibilities:

• Develop custom Docker containers to pull results from vulnerability management tools, verify results using custom rules, and print results into report(s)
• Application Security Testing Build framework for continuous third-party vulnerability assessment and alerting
• Automation - Leveraging AI/ML for automation. Leverage APIs and Webhooks to automatically pull metadata, CVEs and exploit data from tools
• Vulnerability Management Cataloging and reviewing for false positives and mitigations, threat and risk assessments, and lifecycle management through remediation according to SLAs of application vulnerabilities.
• CI/CD pipeline Develop scripts to build and integrate Security tools into the Jenkins pipeline and assist teams with interpreting results from pipeline vulnerability verification reports to facilitate vulnerability remediation.
• Documentation Perform administrative and regulatory control activities including development of process and procedural documentation and gathering evidence for audits.
• Programming knowledge and coding experience, particularly Python, JSON, JAVA, and Bash
• Experience working with APIs
• Experiencing parsing (HTML, XML, etc.)
• Proficient in Github and Jenkins
• Docker experience in automating deployments and testing