FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Secure Software Development Lifecycle (SDLC) practices, integrating security controls into CI/CD pipelines, and applying application security concepts such as OWASP Top 10 and Threat Modeling. Proficient in Java (Spring Boot) and/or C# (.NET) development, with experience in cloud platforms and security tools.
Highest-signal resume keywords
Secure SDLCJava (Spring Boot)Application SecurityDevSecOpsThreat Modeling
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
JavaC#Application SecurityThreat ModelingSecure CodingAPI SecurityCryptographyLinuxScriptingCloud Platforms
Soft Skills
CommunicationCollaborationAnalytical MindsetProblem-SolvingMentoring
Tools & Technologies
SonarQubeCheckmarxFortifyVeracodeSnykOWASP ZAPBurp SuiteTrivy
Industry Keywords
OWASP Top 10ASVSOAuth2OpenID ConnectJWTCI/CDDevSecOps
Tech Stack
Tools & technologiesAWSAzureCloudJavaLinuxSDLCSpringSpring BootSpringBoot.NET
About the role
Key responsibilities & impact- Define and promote secure development best practices (Secure SDLC)
- Integrate security requirements and controls into the software development lifecycle
- Participate in architecture reviews and conduct Threat Modeling sessions
- Analyze and track vulnerabilities identified through penetration tests, SAST, DAST, and dependency and container analysis tools
- Support development teams in analyzing and remediating vulnerabilities
- Coordinate penetration tests, including scope definition, vendor management, and results validation
- Promote Secure Coding best practices through workshops, guidelines, and mentoring
- Support the integration of security controls into CI/CD pipelines (DevSecOps)
- Define metrics and track the evolution of application security maturity
- Work closely with development, architecture, and operations teams
Requirements
What you’ll need- Relevant education or experience in software development and application architecture
- Professional experience in Application Security or related secure development roles
- Strong knowledge of Java (Spring Boot) and/or C# (.NET) development
- Knowledge of cloud platforms (AWS, Azure, or Google Cloud) and experience deploying applications
- Knowledge of Linux and scripting
- Strong command of key application security concepts, including OWASP Top 10 and ASVS, Secure Coding and Threat Modeling, authentication and authorization (OAuth2, OpenID Connect, and JWT), API Security, cryptography, and secrets management
- Experience with security tools such as SonarQube, Checkmarx, Fortify, Veracode, Snyk, OWASP ZAP, Burp Suite, or Trivy
- Knowledge of CI/CD and DevSecOps practices
- Strong communication and collaboration skills when working with multidisciplinary teams
- Ability to influence others and promote technical best practices
- Analytical mindset and problem-solving skills
- Ability to provide training, mentoring, and knowledge sharing
- Pragmatic approach to risk management and mitigation
Benefits
Comp & perks- Health insurance
- Flexible organizational routines
- Training and certifications
- Employee Assistance Program (covering five areas, including psychological support)
- Birthday and long-service gifts
- Monthly Happy Hour
- Benefits portal with attractive offers