- Plano, Texas, United States
- Senior
- 5+ years
Responsible for integrating security throughout the software development lifecycle, performing threat modeling, secure design reviews, managing application security testing programs, and guiding remediation efforts.
Responsibilities
- Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
- Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
- Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
- Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
- Manage and support application security testing programs, including SAST, DAST, SCA, secret scanning, and related security technologies.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
- Nice to have: Experience within a SaaS, cloud-native, software development, or technology organization
- Nice to have: Experience serving as an application security engineer within a mature Product Security or DevSecOps program
- Nice to have: Experience with software development languages such as Java, C#, JavaScript, TypeScript, Python, Go