Security Lead / SME || Chicago, IL (need to attend Onsite Interview) ||12 Months

Role :Security Lead / SME
Location: Chicago, IL (need to attend Onsite Interview)
Max Pay rate: $65/hr on C2C or 55/Hr on W2
Work Authorizations: Authorized to Work in USA
Duration: 12 Months

Primary Skills: Security, SAST, DAST, API

Description:

The consultant will be responsible for end-to-end application security testing across enterprise applications. This includes Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API security testing, AI/ML platforms, and penetration testing. This role requires deep expertise in identifying vulnerabilities, guiding remediation, and ensuring compliance with industry standards such as OWASP Top 10, CWE, CVE, and NIST guidelines.

Required Technical Knowledge & Competencies

·         Expertise in SAST, DAST, API security testing, and penetration testing. 

·         Strong programming knowledge (Java, .NET, Python, JavaScript) for code level analysis,

·         Background of Development

·         Build, maintain, and secure automation pipelines using tools like Jenkins, GitLab CI, or GitHub Actions, ensuring security scans occur at every code commit.

·         Implement and manage security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Security (e.g., Trivy), and dependency scanning

·         Use tools like Terraform or Ansible to deploy secure, compliant infrastructure.

·         Proactively identify, prioritize, and remediate security vulnerabilities in application code and infrastructure.

·         Ensure compliance with industry standards (e.g., PCI-DSS, GDPR) by embedding compliance-as-code into the development workflow.

·         Act as a security advocate, working with DevOps and Development teams to foster a "security first" culture. Familiarity with cloud security testing (AWS, Azure, Google Cloud Platform),

·         Experience with container security (Docker, Kubernetes),

·         Excellent communication and stakeholder management skills. 

Qualifications 

·         6-8 years of IT experience, with at least 5+ years in application security testing.

·          Preferred certifications: OSCP, CEH, GWAPT, CISSP