Hybrid IT Security Auditor: Secure Dev & Cloud Apps

Zenfreed, LLC; Dimondale (MI); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Job summary

Zenfreed, LLC is seeking a Senior Full Stack Application Development Security Auditor to design and build secure platforms across frontend, backend, and cloud-based development teams. You will help transform systems to be securely operated and continuously compliant, leveraging automation to enforce secure configurations and authorization.

The role focuses on maturing secure SDLC practices and guiding teams through secure coding and testing workflows, including SAST/DAST/SCA and API security

Qualifications

• 5+ years of total IT experience.
• 3+ years implementing Federal, Industry and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security Alliance, SafeCode).
• Hands-on knowledge building and deploying secure complex distributed web and mobile applications.

Responsibilities

• Lead efforts to implement security patterns and practices with orchestration and automation tools for secure configuration, verification, compliance, and authorization.
• Help mature the organization’s secure software development practices.

Skills

Security auditing

Secure coding practices

DevSecOps

API security

OWASP Top 10

Education

Bachelor's degree

Tools

SAST

DAST

SCA

ASOC

Container/Cloud

Coverity

BlackDuck

SRM

Fortify

Job description

Zenfreed, LLC is seeking a Senior Full Stack Application Development Security Auditor to design and build secure platforms across frontend, backend, and cloud-based development teams. You will help transform systems to be securely operated and continuously compliant, leveraging automation to enforce secure configurations and authorization.

The role focuses on maturing secure SDLC practices and guiding teams through secure coding and testing workflows, including SAST/DAST/SCA and API security