Five (5) years or more experience with OWASP, SAST, DAST, SCA, RASP and common security tools, required.
Seven (7) years or more application security, security engineering, software development, or a related field, required.
Five (5) years or more strong understanding of web application security and common attack vectors. (e.g. SQL injection, XSS, CSRF), required.
Five (5) years or more experience with secure coding practices, threat modeling, and secure software development life cycle (SDLC) methodologies. required
Five (5) years or more proven experience in diagnosing, isolating, resolving complex issues and recommending/implementing strategies to resolve problems, required.
Five (5) years or more demonstrated experience with systems integration processes, methodology and tools, required.
Seven (7) years or more development and scripting experience, required.
Five (5) years or more professional application security role, required.
Five (5) years or more experience with API and Web Security, required.
Three (3) years or more experience with WAF, or similar application security infrastructure a plus, preferred.
Seven (7) years or more experience in integrating security in CI/CD, DevOps, required.
Six (6) years or more experience process or operation management
Six (6) years or more experience Value Stream Mapping, Continuous Flow, Pull Replenishment and other process improvement experience.
Skills
Excellent communication skills, both verbal and written, and the ability to work effectively with cross-functional teams.
Ability to create and maintain professional relationships within all levels of the organization (peers, work groups, customers, supervisors).
Ability to work independently and as a member of a team.
Flexibility to operate and self-driven to excel in a fast-paced environment.
Capable of multi-tasking, highly organized, with excellent time management skills
Proficiency in at least one programming language (e.g. Python, .NET, Javascript) with .NET preferred., advanced, required.
Proficiency in at least one common scripting language (e.g. PowerShell, bash, etc.), advanced, required.
Familiarity of NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations, expert, required.
CI/CD experience with Azure Devops, Terraform or other automation and integration technologies, expert, required.