Senior Application Security Engineer - Cloud & DevSecOps

TechAviv; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

TechAviv is seeking a security-focused professional to lead development and implementation of application security across the full software development lifecycle in a fast-paced environment. You will collaborate with engineering to integrate security into architecture and perform hands-on testing of web apps, APIs, and cloud services.

Requirements include 4+ years in application security, deep OWASP Top 10 and API risk knowledge, and cloud expertise (AWS, GCP, or Azure), with proven CI/CD tool

Qualifications

• Requires 4+ years of professional experience in application or software security.
• Strong knowledge of OWASP Top 10 and API risks.
• Expertise in cloud technologies (AWS, GCP, or Azure).
• Experience integrating security tools into CI/CD workflows.

Responsibilities

• Lead the development and implementation of application security protocols throughout the software development lifecycle.
• Partner with engineering teams to integrate security into architecture and perform hands-on testing of web applications, APIs, and cloud services.

Skills

Application Security

Cloud Security

SDLC

Security Testing

CI/CD Pipelines

OWASP Top 10

API Security

SAST

DAST

Container Security

Infrastructure-as-Code Scanning

Cryptography

AWS

GCP

Azure

HIPAA Compliance

Tools

SAST

DAST

IaC Scanning

Job description

TechAviv is seeking a security-focused professional to lead development and implementation of application security across the full software development lifecycle in a fast-paced environment. You will collaborate with engineering to integrate security into architecture and perform hands-on testing of web apps, APIs, and cloud services.

Requirements include 4+ years in application security, deep OWASP Top 10 and API risk knowledge, and cloud expertise (AWS, GCP, or Azure), with proven CI/CD tool