Senior Analyst
Core
Lead application security engineering across the software development lifecycle, embedding security into design and development via SAST/DAST scanning, penetration testing, and DevSecOps enablement.
Role type
Senior IC application security engineer (DevSecOps)
Builds
Secure software releases and CI/CD pipelines with integrated security controls
Domain
Software development, Application Security, DevSecOps
Required skills
SAST/DAST scanning, penetration testing, vulnerability remediation, CI/CD integration, secure coding practices, risk assessment, stakeholder collaboration
Preferred skills
Threat modeling, software supply-chain security, compliance frameworks, additional security tooling
Technologies
Invicti, GitHub, Azure, CI/CD pipelines, SAST/DAST tools
Responsibilities
Configure and optimize enterprise SAST and DAST capabilities; execute web application and API penetration tests; integrate security controls into CI/CD workflows; manage end-to-end vulnerability lifecycle; collaborate with development teams on secure coding and remediation
Seniority
Senior, hands-on IC
