Location - Remote (may be Santa Calara, USA later on )
AppSec Consultant/Sr Engineer
- Advanced level, hands-on experience in cyber security with approximately 2 - 5 years' experience of application security, pen test, OWASP, security benchmarks, and automation.
- Security tooling and best practices, such as pre-commit/pre-receive hooks, dependency scanning, SAST - Checkmarx, IAST, OSS - Synopsys Blackduck, DAST, RASP, and vulnerability management.
- Experience in container-based deployments and orchestration tools (Kubernetes, Docker, EKS, GKE, and/or Terraform).
- Experience in Twistlock (Prisma Cloud Compute).
- Experience Security source code reviews, open source software composition analysis.
- Experience in Secure CI-CD - Jenkins, Gitlab, Bamboo.
- Experience with security tools benchmark and fine tuning.
- Experience in software security testing, methodologies, and frameworks.
- Knowledge of microservice architecture for securing APIs across multi-cloud environments.
- Effective written and oral communication with multiple levels of leadership involving both the business and technical sides of the business