- Tempe, Arizona, United States +1 more
- On-site
- Full-time · Senior
Provide security guidance for web applications, APIs, cloud-native services, and agent-enabled workflows; maintain secure coding patterns; engineer scalable security controls; integrate risk-based checks into CI/CD; triage vulnerabilities; coordinate penetration testing; mentor engineers and security champions.
Locations (2)
- Tempe, Arizona, United States
- St. Louis, Missouri, United States
Responsibilities
- Provide security guidance for web applications, APIs, cloud-native services, and agent-enabled workflows.
- Maintain secure coding patterns and controls aligned to OWASP ASVS, NIST SSDF, and internal SDLC standards.
- Engineer scalable SAST, SCA, secret, IaC, DAST, API, and container/artifact controls.
- Integrate risk-based checks into GitHub and CI/CD workflows.
- Tune findings by exploitability, reachability, and asset criticality; automate Jira work items, evidence capture, and policy-as-code.
Requirements
- Nice to have: Regulated-industry experience