Senior Security Developer - 100% remoto

We are looking for a Senior Security Developer, to be part of our team of consultants and to help our client.

The company's Global Application Security Program is responsible for integrating automated security testing into both CI/CD pipelines and continuous monitoring to identify and manage security risks in applications. Our mission is to make security risks visible and actionable to the business and ensure that vulnerabilities are addressed promptly and effectively. This role involves driving the integration of automated security tools into CI/CD pipelines, and developing innovative scalable full-stack solutions, middleware, and automation solutions. This role will be responsible for executing on our strategic application security objectives, providing expert guidance on vulnerability triage and remediation, and fostering a culture of proactive security across the organization.

Responsibilities

• Develop and maintain green field automation solutions and full stack applications to support and enhance application security.
• Develop and maintain a centralized findings management system to efficiently manage and track key application security metrics.
• Develop and tune rule sets / detections for the automated security tools to increase detection capabilities and reduce false positives.
• Develop and maintain automated security tools within CI/CD pipelines. Ensure seamless integration and operation to enhance security posture.
• Design and implement strategies to ensure automated security tools are configured to operate in an optimal fashion. Establish and monitor key performance indicators (KPIs) to constantly measure effectiveness and make necessary adjustments for continuous improvement.
• Provide triage and remediation guidance for application security vulnerabilities where needed.
• Foster a collaborative environment, promote knowledge sharing to build a strong, skilled security team.
• Continuously research and raise novel concepts to improve the application security posture of the business. Stay updated with the latest security trends, tools, and practices.
• Develop technical documentation (i.e. system design, architecture diagrams, data flows, functional specifications).
• Contribute to defining the future state of cybersecurity within the organization by conducting technical assessments between current state and the desired state across security tools and services.
• Develop program metrics, continuously measure progress and impact and drive improvements.
• Collaborate with the leadership and cross-functional teams including DevOps, development teams, security operations, data and analytics, enterprise architecture, Platform team, and sector functions.
• Execute projects, objectives, and deliverables in alignment with the team's vision, mission, and goals.
• Create and deliver training sessions; mentor junior team members; and engage in knowledge transfer sessions, technical design reviews, security reviews, and business review meetings.
  
  
  

Requisitos

• Master’s degree in computer science, Engineering, or a related field, or a Bachelor’s degree with a minimum of 3 years of relevant experience
• Proficient in at least one programming language (C#, Java, Go, etc.) and scripting language (Python, bash, PowerShell, etc.).
• Proficient in at least one database management system and query language (MSSQL, PostgreSQL, etc.)
• Proficient in developing full-stack applications and rapidly prototyping solutions to support automated data collection, aggregation, and analysis.
• Proficient in integrating and managing automated security tools within CI/CD pipelines.
• Experience with modern CI/CD tools and practices, and their integration into the development lifecycle (Jenkins, Azure DevOps, GitHub Enterprise, Circle CI, Heroku, etc.)
• Experience with writing custom vulnerability detection patterns / rules.
• Experience with public cloud services (Azure, AWS, Alibaba).
  
  

Beneficios

• Competitive salary
• Freelancer contract (full-time)
• Long-term project (6 months - possibility of extension)
• Autonomy and the opportunity to suggest and promote new opportunities
• Personalised career development, allowing you to decide where you want to go.
  
  

Apply or send your CV to jobs@sapindex.es and be part of this exciting project! 🚀