Security Code Review Expert

SKY VC; Orlando, Northern (FL, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

ThreatLocker is seeking a Security-Focused Software Developer to perform manual and automated code reviews for security vulnerabilities. The in-office role is based in Orlando, FL, and involves collaborating with developers and security teams to strengthen secure coding practices.

Candidates should have a strong SSDLC understanding, 5+ years in software development with 2+ years in secure code review, and familiarity with tools like SonarQube, Fortify, Checkmarx, and Veracode.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• Minimum 5 years software development with at least 2 years in secure code review.
• Solid understanding of SSDLC and security best practices.
• Familiarity with industry security tools and OWASP Top 10.

Responsibilities

• Perform in-depth security-focused code reviews across codebases and languages.
• Identify common and advanced security vulnerabilities and provide mitigations.
• Educate developers on secure coding practices and secure design.
• Recommend fixes and ensure alignment with security standards (OWASP Top 10, CWE, NIST).
• Collaborate with security engineers and DevSecOps to improve security posture.
• Document findings and track remediation status.
• Utilize static and dynamic analysis tools to supplement reviews.
• Participate in security audits, threat modeling, and secure code training.

Skills

Analytical skills

Communication

Documentation

SSDLC knowledge

Education

Bachelor’s degree in Computer Science or Cybersecurity

5+ years in software development; 2+ years in secure code review/app security

Tools

SonarQube

Fortify

Checkmarx

Veracode

Job description

ThreatLocker is seeking a Security-Focused Software Developer to perform manual and automated code reviews for security vulnerabilities. The in-office role is based in Orlando, FL, and involves collaborating with developers and security teams to strengthen secure coding practices.

Candidates should have a strong SSDLC understanding, 5+ years in software development with 2+ years in secure code review, and familiarity with tools like SonarQube, Fortify, Checkmarx, and Veracode.