Job Description

Job Description
Profile is sought to drive the adoption of SSDLC in custom application logic within enterprise systems. The position includes validation of external security reports, vulnerability analysis and advice on secure development practices.
Responsibilities:
Validate and classify external security reports, including bug bounty submissions.
Perform threat modeling to identify possible attack vectors and define appropriate mitigations.
Advise development teams on secure code practices to reduce and prevent vulnerabilities.
Perform vulnerability testing and application analysis, guiding teams in remediation.
Perform security assessments of internally developed software components.
Contribute to the development, improvement and implementation of SSDLC processes.
Perform post-security incident reviews of applications and vulnerabilities.
Act as an application security advisor to engineers, including development training.
Requirements:
Knowledge of security models for Web applications and REST APIs, cloud, mobile and desktop.
Hands-on experience with security assessment tools and attack techniques, with the ability to perform assessments beyond simple input injection.
Experience evaluating code in Go, Python, Rust, C/C++ and JavaScript.
Basic programming knowledge in Go, Python or similar languages.
Knowledge of security features and controls in Salesforce.
More than 5 years of experience in application security.

Salary to receive
To agree