Context:
Our client is enhancing secure software development by implementing and optimizing DevSecOps tooling to improve security and development efficiency.
Responsibilities:
Evaluate, implement, and fine-tune tools for Threat Modelling, Secret Scanning, SAST, and DAST
Maximize value from existing tools like Checkmarx, Qualys, Prisma Cloud, and Hashicorp Vault
Collaborate with development teams to integrate security tools into CI/CD pipelines (GitHub)
Reduce development delays caused by security processes
Profile:
Expertise in Defect Dojo, API Security, container and cloud security
Familiarity with SAMM or similar application security frameworks
Master’s degree or equivalent experience in cybersecurity or related field