Senior Secure Software Auditor for DevSecOps & Secure SDLC

Stafford Gray; Town of Lansing (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Stafford Gray seeks a Senior Full Stack Application Development Security Auditor to design and build secure platforms through DAST, SAST, and SCA assessments. This role collaborates with frontend, backend, and cloud developers to embed secure coding practices across teams.

It partners with distributed teams to mature secure software development, automate secure configuration, verification, and authorization, and elevate the organization’s security posture.

Qualifications

• 5+ years of IT experience in security
• 3+ years implementing secure coding practices and guidelines (OWASP, SANS, CERT)
• 3+ years building secure distributed web/mobile apps and DevSecOps

Responsibilities

• Lead securing patterns and practices with orchestration/automation tools
• Collaborate with development teams to enforce secure coding across front-end, back-end, and cloud apps
• Perform dynamic, static, and software composition analysis assessments
• Explain OWASP Top 10 vulnerabilities in detail to stakeholders

Skills

Security scanning tools

OWASP Top 10 explanations

API security/JWT/OAuth

Cloud development

Containers

DevSecOps

Tools

Coverity

BlackDuck

SRM

Fortify

Job description

Stafford Gray seeks a Senior Full Stack Application Development Security Auditor to design and build secure platforms through DAST, SAST, and SCA assessments. This role collaborates with frontend, backend, and cloud developers to embed secure coding practices across teams.

It partners with distributed teams to mature secure software development, automate secure configuration, verification, and authorization, and elevate the organization’s security posture.