Senior Full-Stack Security Auditor (DevSecOps & Cloud)

IO Datasphere; Dimondale (MI); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Cybersecurity and Infrastructure Protection (DTMB-CIP) in Dimondale, MI seeks a Sr. Full Stack Application Development Security Auditor to secure platforms via dynamic, static, and software composition assessments.

You will work with front-end, back-end and cloud developers to mature secure SDLC practices and automate security validation across systems. This role focuses on implementing security patterns, orchestration, and automation tools to verify and enforce secure configuration, compliance,

Qualifications

• Experience with security scanning tools across SAST/DAST/SCA and software composition.
• Ability to explain OWASP Top 10 vulnerabilities in detail.
• 3+ years applying Federal/Industry security guidance and secure coding practices.
• 3+ years with Angular/React/Node.js/Java/Spring/BPM stacks and cloud dev.
• Experience with DevSecOps, secure coding, and automation for secure config and auth.

Responsibilities

• Lead efforts to implement security patterns with orchestration and automation.
• Collaborate with distributed development teams to improve secure SDLC practices.
• Automate secure configuration, verification, compliance, and authorization of systems.
• Mentor on secure coding and risk mitigation for complex distributed apps.

Skills

Security auditing

SAST/DAST/SCA

OWASP Top 10

Federal/Industry Guidance

Languages: Java

Languages: Node.js

Languages: React

DevSecOps

Cloud security

API security

JWT/OAuth/OIDC

Web security tooling

Containers security

Tools

Coverity

BlackDuck

Fortify

Job description

Cybersecurity and Infrastructure Protection (DTMB-CIP) in Dimondale, MI seeks a Sr. Full Stack Application Development Security Auditor to secure platforms via dynamic, static, and software composition assessments.

You will work with front-end, back-end and cloud developers to mature secure SDLC practices and automate security validation across systems. This role focuses on implementing security patterns, orchestration, and automation tools to verify and enforce secure configuration, compliance,