Lead DevSecOps Security Test Engineer

Mythri Consulting LLC; Englewood (NJ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Mythri Consulting LLC in New Jersey is seeking a Lead Security Test Engineer with strong DevSecOps and application security experience to design, implement, and execute security testing across the software development lifecycle.

Applicants should have hands-on experience with SAST, DAST, SCA, API security, penetration testing, vulnerability assessment, and threat modeling, and be able to integrate security checks into Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps.

Qualifications

• Experience in application security testing across SDLC.
• Hands-on SAST/DAST/SCA and API security testing.
• Ability to integrate security controls into CI/CD pipelines.
• Familiarity with threat modeling and OWASP frameworks.
• Strong communication with Dev, QA, DevOps, Cloud and Security teams.

Responsibilities

• Design and execute security testing strategies for web apps, APIs, microservices, mobile apps, and cloud environments.
• Perform vulnerability assessments and penetration testing and validate remediation.
• Integrate security testing tools and automated gates into CI/CD pipelines.
• Lead shift-left security and DevSecOps practices in the SDLC.
• Collaborate with cross-functional teams to remediate vulnerabilities.

Skills

Application Security Testing

SAST

DAST

SCA

API Security Testing

Penetration Testing

Vulnerability Assessment

Threat Modeling

OWASP

DevSecOps

Security Test Automation

REST / GraphQL API Security

CI/CD Security Integration

Tools

Jenkins

GitHub Actions

GitLab CI/CD

Azure DevOps

Docker

Kubernetes

AWS Secrets Manager

Job description

Mythri Consulting LLC in New Jersey is seeking a Lead Security Test Engineer with strong DevSecOps and application security experience to design, implement, and execute security testing across the software development lifecycle.

Applicants should have hands-on experience with SAST, DAST, SCA, API security, penetration testing, vulnerability assessment, and threat modeling, and be able to integrate security checks into Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps.