Lead Engineer - AppSec

Análises de mercado

Grátis, depois de entrar.

Candidatar-se

Envie seu currículo: empregadores e recrutadores de vários países que procuram o seu perfil poderão falar com você diretamente.

Descrição

Accountabilities - Lead application security practices: Act as the technical security reference for Product and Engineering teams, integrating security early in the software development lifecycle without unnecessarily slowing delivery. - Conduct threat modeling: Facilitate threat modeling sessions for new features and architectural changes, identifying potential attack paths, assessing risks, and recommending appropriate security controls before implementation. - Perform security reviews and testing: Review application code and conduct manual security testing across web, API, and mobile applications to identify vulnerabilities such as cross-site scripting (XSS), insecure direct object references (IDOR), server-side request forgery (SSRF), injection flaws, and access control weaknesses. - Strengthen automated security testing: Implement, maintain, and optimize Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets detection tools within CI/CD pipelines. - Manage vulnerabilities end to end: Triage, prioritize, track, and coordinate remediation activities, helping developers understand findings and implement effective fixes. - Establish security standards: Develop secure coding guidelines, checklists, and best practices covering authentication, authorization, encryption, and personal data protection. - Improve security visibility and performance: Assess the current application security landscape,

Descrição completa, empresa e link para se candidatar: depois de entrar. Entrar

Os contatos do empregador (e-mail/telefone/telegram) ficam ocultos na prévia pública. Envie seu currículo para que os empregadores possam falar com você diretamente.