Apply Now

IT Security Auditor

Lansing, MI, US • Posted 5 hours ago • Updated 5 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

IT Security
Security Operations
Risk Management
Orchestration
Regulatory Compliance
Authorization
Software Development
Google Chrome
Firefox
Software Security
SCA
Coverity
SAP SRM
Supplier Relationship Management
Fortify
HTTP
RESTful
Scripting
XML
OAuth
OIDC
API
Cloud Computing
Microsoft Azure
Amazon Web Services
Google Cloud
Google Cloud Platform
Open Source
OWASP
SANS
Security Controls
Cloud Security
Collaboration
AngularJS
React.js
Node.js
Java
Spring Framework
IBM WebSphere
Oracle
WildFly
.NET
Stacks Blockchain
Computer Networking
Application Development
DevSecOps
Mobile Applications
MI
Marketing Intelligence
PASS

IT Security
Security Operations
Risk Management
Orchestration
Regulatory Compliance
Authorization
Software Development
Google Chrome
Firefox
Software Security
SCA
Coverity
SAP SRM
Supplier Relationship Management
Fortify
HTTP
RESTful
Scripting
XML
OAuth
OIDC
API
Cloud Computing
Microsoft Azure
Amazon Web Services
Google Cloud
Google Cloud Platform
Open Source
OWASP
SANS
Security Controls
Cloud Security
Collaboration
AngularJS
React.js
Node.js
Java
Spring Framework
IBM WebSphere
Oracle
WildFly
.NET
Stacks Blockchain
Computer Networking
Application Development
DevSecOps
Mobile Applications
MI
Marketing Intelligence
PASS

Summary

Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static, and Software Composition Analysis assessments. This position is not a member of the Security Operations Center - rather, it is dedicated to working with software development teams on secure coding practices. The ideal candidate will feel comfortable working with front-end, back-end, and cloud-based application developers.

Partnering with distributed teams, this role helps transform the way systems are built, secured, authorized, and operated for continuous compliance and risk mitigation. The candidate will help lead efforts to implement security patterns and practices with orchestration and automation tools that automate secure configuration, verification, compliance, and authorization of systems and their development - serving as a key contributor to maturing the organization's secure software development practices.

Functional Knowledge:

Chrome/Firefox/Edge developer tools for inspecting request/response headers
Experience with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud) - required
Experience with Coverity, BlackDuck, SRM, or Fortify - a plus
HTTP request/response headers for web and RESTful API calls
Ability to explain in detail any of the OWASP Top 10 vulnerabilities (Cross-Site Scripting, Injection attacks, SSRF, CSRF, XML entity, etc.)
API security, JWT, OAuth/OIDC/PKCE
Web and API replay attacks
High-level understanding of containers
Cloud development experience (Azure, AWS, Google Cloud Platform)

Requirements

Minimum Qualifications:

5+ years of total IT-related experience
3+ years implementing/utilizing Federal, Industry, and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security Alliance, SafeCode, etc.)
3+ years with compiled and interpreted languages such as Angular, React, Node.js, Java, Spring Boot, IBM WebSphere, Oracle JBoss, or .NET stacks
3+ years with networking, infrastructure, secure application development, and security automation (DevSecOps)
3+ years of hands-on experience building and deploying secure, complex distributed web and mobile applications
Must be located within 90-100 miles of Dimondale, MI at time of submission (local candidates only - hard requirement)
Must be able to pass a CJIS background check

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80184850
Position Id: dabe5d9f8843a132eb069cf06654c3e5
Posted 5 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Sr IT Security Auditor

Hybrid in Dimondale, Michigan

•

Today

Hi, Greetings from DIA SOFTWARE SOLUTIONS LLC! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr IT Security Auditor ,Hybrid, MI PLEASE SEND THE RESUMES TO SKUMAR AT DIASOFTWARESOLUTIONS DOT COM ! Job Description: Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applicati

Easy Apply

Contract, Third Party

Depends on Experience

IT Security Auditor

Dimondale, Michigan

•

Today

Job Title: IT Security Auditor Duration: 1 year with possible extension Work Mode: Hybrid Interview Process: Virtual interview via MS Teams, with 2nd round interviews held in person. Candidates MUST be available for an in-person interview. Candidate Requirements: Local candidates ONLY Must be located within 90-100 miles of Dimondale, MI at the time of submission. Must have the ability to pass a CJIS background check. Candidates must be available for the required onsite schedule and in-person

Easy Apply

Third Party, Contract

Full Stack Application Security Auditor

Hybrid in Dimondale, Michigan

•

3d ago

Our client is looking for a Sr. Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis assessments This position is not a member of the Security Operations Center, rather it is dedicated to working with software development teams on secure coding practices. The ideal candidate will feel comfortable working with both front-end, back-end and cloud-based applicatio

Third Party, Contract

Depends on Experience

Cyber Security - IT Security Auditor

Dimondale, Michigan

•

Today

Top Skills & Years of Experience: - This position is not a member of the Security Operations Center, rather it is dedicated to working with software development teams on secure coding practices. Candidates must have a strong development background. - Experience with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud) a must. - HTTP Request/Response headers for web and Restful API calls - Ability to explain in detail any of the OWASP top 10 vulnerabilities - Cross Sit

Easy Apply

Contract

$70

Search all similar jobs

More jobs at Stafford Gray in Lansing, MI