Lead DevSecOps Security Test Engineer

Prudent Technologies and Consulting; Englewood Cliffs (NJ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Prudent Technologies and Consulting is seeking a Lead Security Test Engineer with strong DevSecOps and application security experience to design, implement, and execute security testing throughout the software development lifecycle.

The ideal candidate will perform SAST, DAST, SCA, API security, penetration testing, vulnerability assessment, and threat modeling, with the ability to integrate security testing into CI/CD pipelines.

Qualifications

• Lead security testing across the SDLC with a DevSecOps focus.
• Hands-on with SAST, DAST, SCA, API security and threat modeling.
• Experience integrating security checks into CI/CD pipelines.

Responsibilities

• Design and implement security testing strategies for web apps, APIs, microservices, mobile apps, and cloud environments.
• Perform SAST, DAST, SCA, API security testing, container security, and infrastructure security testing.
• Conduct vulnerability assessments and penetration testing and validate remediation.
• Integrate security testing tools and automated gates into CI/CD pipelines.
• Develop security testing automation using Python, Java, JavaScript, or Bash.
• Collaborate with Development, QA, DevOps, Cloud, and Security teams to remediate vulnerabilities early.
• Implement shift-left security and DevSecOps controls across the SDLC.
• Configure and manage security tools for SAST, DAST, SCA, secrets scanning, container scanning, and IaC security.
• Test Docker/Kubernetes environments and REST/GraphQL APIs.

Skills

Application Security Testing

SAST

DAST

SCA

API Security Testing

Penetration Testing

Vulnerability Assessment

Threat Modeling

OWASP

DevSecOps

Security Test Automation

CI/CD Security Integration

Tools

CI/CD Tooling

Job description

Prudent Technologies and Consulting is seeking a Lead Security Test Engineer with strong DevSecOps and application security experience to design, implement, and execute security testing throughout the software development lifecycle.

The ideal candidate will perform SAST, DAST, SCA, API security, penetration testing, vulnerability assessment, and threat modeling, with the ability to integrate security testing into CI/CD pipelines.