contract Application Security Engineer IAC

Responsibilities

• Policy & Procedures : Engage with the relevant stakeholders to establish and review corporate policy and procedures governing the secure development of applications.
• Security Architecture & Design : Participate in 'Shift Left' initiatives by performing threat modeling and architectural risk assessments during the design phase.
• Vulnerability Management : Conduct regular SAST (Static), DAST (Dynamic), and SCA (Software Composition Analysis) scanning. Prioritize and triage results for development teams.
• Code Review : Perform manual secure code reviews to identify logic flaws and vulnerabilities (OWASP Top 10) that automated tools might miss.
• DevSecOps Integration : Assist in automating security checkpoints within CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions).
• Remediation Guida...