IT Security Auditor

Shree Narayani Networking Solutions Pvt Ltd; Dimondale (MI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Shree Narayani Networking Solutions Pvt Ltd is seeking an IT Security Auditor in Dimondale, MI. You will lead security assessments, promote secure development practices, and drive DevSecOps automation across cloud and on-premise systems.

The role requires 5+ years IT experience, 3+ years in application security, and the ability to work in a hybrid environment with in-person interviews and CJIS background checks for local candidates.

Qualifications

• 5+ years IT experience
• 3+ years in secure coding and application security
• experience with both compiled and interpreted languages
• willingness to pass CJIS background check
• hybrid work environment with on-site Wednesdays and Thursdays

Responsibilities

• Serve as a Senior Full Stack Application Development Security Auditor focusing on secure platform and application design.
• Conduct DAST, SAST, and SCA assessments on software systems.
• Collaborate with development teams to promote secure coding practices.
• Automate secure configuration, verification, and compliance of systems.

Skills

Secure coding

Application security

DevSecOps

OWASP

Tools

Coverity

BlackDuck

SRM

Fortify

Job description

Job Summary for IT Security Auditor (Dimondale, MI)

• Serve as a Senior Full Stack Application Development Security Auditor focused on secure platform and application design.
• Conduct Dynamic, Static, and Software Composition Analysis (DAST, SAST, SCA) assessments on software systems.
• Collaborate with software development teams to promote and implement secure coding practices.
• Guide and lead efforts to automate secure configuration, verification, compliance, and authorization of systems using orchestration and automation tools.
• Advise on and implement security patterns and practices for continuous compliance and risk mitigation.
• Work with distributed teams to transform and enhance secure software development lifecycle processes.
• Utilize application security tools such as Coverity, BlackDuck, SRM, Fortify, and others.
• Analyze and explain security vulnerabilities including those listed in the OWASP Top 10 (e.g., XSS, injection, CSRF, SSRF).
• Assess and secure web, API, and cloud (Azure, AWS, GCP) based applications, including containerized environments.
• Apply federal, industry, and open-source security standards and guidelines (OWASP, SANS, CERT, etc.).
• Work with multiple programming languages and frameworks such as Angular, React, Node.js, Java, Spring Boot, .NET, and related stacks.
• Ensure compliance through secure application development, networking, infrastructure, and security automation (DevSecOps).
• Participate in hybrid work environment-on-site two days a week (Wednesdays and Thursdays required).
• Local candidates only; must be able to attend in-person interviews and pass a CJIS background check.
• Minimum qualifications: 5+ years IT experience, 3+ years in secure coding and application security, and experience with both compiled and interpreted languages.