Senior Full-Stack App Security Auditor (DevSecOps)

Talent Portus; Michigan; Hybrid; USD 110,000 - 160,000; Full time

Job summary

Talent Portus is seeking a Senior Full Stack Application Security Auditor to strengthen secure software development across applications and platforms. The role focuses on Application Security, Secure Coding, DevSecOps, security assessments, and vulnerability management, collaborating with front-end, back-end, cloud, and development teams.

The candidate will perform security assessments, remediate OWASP Top 10 vulnerabilities, and help advance secure patterns and automation across environments in

Qualifications

• 5+ years of total IT experience.
• 3+ years implementing security guidance and secure coding practices.
• Strong knowledge of OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security Alliance, SafeCode.
• Hands-on experience with SAST, DAST, SCA, ASOC, Container/Cloud security scanning.
• Knowledge of HTTP headers and RESTful APIs; experience with JWT, OAuth, OIDC, PKCE.

Responsibilities

• Perform and support application security assessments using SAST, DAST, SCA, ASOC, Container, and Cloud security tools.
• Partner with software development teams to implement secure coding practices.
• Identify and assess application vulnerabilities and security risks.
• Help implement security patterns, practices, automation, and orchestration.
• Support secure configuration, verification, compliance, and authorization processes.
• Review web applications and APIs for security vulnerabilities.
• Explain and remediate OWASP Top 10 vulnerabilities.
• Work with development teams across front-end, back-end, and cloud environments.
• Support DevSecOps and security automation initiatives.
• Contribute to the maturity of secure software development practices.

Skills

IT security experience

OWASP Top 10

SAST/DAST/SCA

Cloud security

Secure coding practices

DevSecOps

RESTful APIs

AWS/Azure/GCP

Team collaboration

Tools

Coverity

Fortify

Black Duck

Job description

Talent Portus is seeking a Senior Full Stack Application Security Auditor to strengthen secure software development across applications and platforms. The role focuses on Application Security, Secure Coding, DevSecOps, security assessments, and vulnerability management, collaborating with front-end, back-end, cloud, and development teams.

The candidate will perform security assessments, remediate OWASP Top 10 vulnerabilities, and help advance secure patterns and automation across environments in