Senior Full-Stack Security Auditor: Secure Dev & Cloud

I O DATASPHERE

Michigan

Hybrid

USD 90,000 - 130,000

Full time

16 hours ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Cybersecurity and Infrastructure Protection (DTMB-CIP) seeks a Sr. Full Stack Application Development Security Auditor to design and build secure platforms and applications through dynamic, static, and software composition analysis.

The role focuses on secure coding practices, working with front-end, back-end, and cloud developers, and maturing the organization's secure software development programs. Hybrid onsite two days a week in Dimondale, MI.

Qualifications

Experience with application security scanning tools (SAST, DAST, SCA, ASOC, container/cloud).
Familiar with HTTP headers and RESTful API security.
Ability to explain OWASP Top 10 vulnerabilities in detail.
5+ years of total IT experience.
3+ years applying Federal/Industry/Open-Source security guidance (OWASP Top 10, SANS, CERT, CWE, CSS, etc.).
3+ years with Angular, React, Node.js, Java/Spring Boot, .NET stacks.
3+ years security automation and DevSecOps experience.

Responsibilities

Lead efforts to implement security patterns and automation for configuration, verification, compliance, and authorization.
Collaborate with development teams to mature secure software development practices.
Work with front-end, back-end and cloud developers to ensure secure code and operations.