IT Security Auditor

Job Summary for IT Security Auditor (Dimondale, MI)

- Serve as a Senior Full Stack Application Development Security Auditor focused on secure platform and application design.
- Conduct Dynamic, Static, and Software Composition Analysis (DAST, SAST, SCA) assessments on software systems.
- Collaborate with software development teams to promote and implement secure coding practices.
- Guide and lead efforts to automate secure configuration, verification, compliance, and authorization of systems using orchestration and automation tools.
- Advise on and implement security patterns and practices for continuous compliance and risk mitigation.
- Work with distributed teams to transform and enhance secure software development lifecycle processes.
- Utilize application security tools such as Coverity, BlackDuck, SRM, Fortify, and others.
- Analyze and explain security vulnerabilities including those listed in the OWASP Top 10 (e.g., XSS, injection, CSRF, SSRF).
- Assess and secure web, API, and cloud (Azure, AWS, Google Cloud Platform) based applications, including containerized environments.
- Apply federal, industry, and open-source security standards and guidelines (OWASP, SANS, CERT, etc.).
- Work with multiple programming languages and frameworks such as Angular, React, Node.js, Java, Spring Boot, .NET, and related stacks.
- Ensure compliance through secure application development, networking, infrastructure, and security automation (DevSecOps).
- Participate in hybrid work environment—on-site two days a week (Wednesdays and Thursdays required).
- Local candidates only; must be able to attend in-person interviews and pass a CJIS background check.
- Minimum qualifications: 5+ years IT experience, 3+ years in secure coding and application security, and experience with both compiled and interpreted languages.