Security-Centric Software Reviewer – In-Office

ADP, Inc.; Orlando (FL); Sur place; USD 100 000 - 150 000; Plein temps

Résumé du poste

You’ll work with developers and security teams to educate on secure coding, document findings, and drive remediation aligned with OWASP Top 10, CWE, and NIST guidelines.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field or equivalent experience.
• 5+ years in software development with at least 2 years in secure code review or application security.
• Strong SSDLC understanding.
• Familiarity with security tools such as SonarQube, Fortify, Checkmarx, Veracode.

Responsabilités

• Perform in-depth security-focused code reviews across various codebases and languages.
• Identify common and advanced security vulnerabilities (e.g., injection, XSS, insecure deserialization, insecure APIs).
• Work closely with developers to educate and guide them in secure coding practices.
• Recommend fixes and mitigation strategies, ensuring adherence to security standards (e.g., OWASP Top 10, CWE, NIST).
• Collaborate with security engineers, architects, and DevSecOps teams to enhance code security posture.
• Maintain documentation of findings and track remediation status.
• Utilize static and dynamic analysis tools to supplement manual reviews.
• Participate in security audits, threat modeling, and secure code training sessions.

Connaissances

Software development

Secure code review

SSDLC knowledge

Communication skills

Documentation

Formation

Bachelor’s degree in Computer Science or Cybersecurity

Outils

SonarQube

Fortify

Checkmarx

Veracode

Description du poste

You’ll work with developers and security teams to educate on secure coding, document findings, and drive remediation aligned with OWASP Top 10, CWE, and NIST guidelines.