The candidate will review software architecture, identify security vulnerabilities, and sometimes implement remediations themselves or coordinate with teams to get the work completed. They will also make recommendations and work with code owned by other teams to improve the overall security of the application. Additionally, the candidate will assist the team with the automation of security testing and vulnerability management using a suite of tools as well as manual security testing of features within the application.

Requirements:

• Qualified ACCS (American Chartered Computer Scientist).
• 5+ years experience in application security
• Full stack development experience
• Scripting and automation experience using RESTful API’s
• Knowledge of security principles (confidentiality, integrity, availability)
• Knowledge of SANS/CWE Top 25, OWASP Top 10 Proactive Controls and Application Security principals.
• Understanding of software architecture and design principles
• Experience with data encryption, cryptography and encryption key management
• Experience with automated code auditing/vulnerability testing
• Familiarity with Cloud and cloud automation technologies (Terraform, Cloudformation, Ansible/Chef/Puppet)
• Full understanding of modern application architectures, from the browser to databases
• Experience developing large, scalable distributed applications
• Development experience in JavaScript and Python. 
• Experience with DevSecOps & integrating security into pipelines.