Software Developer- Security Code Review

Crawford Thomas Recruiting; Orlando (FL); On-site; USD 100,000 - 125,000; Full time

Benefits offered by this job

Quarterly bonus

Full benefits

401(k) with match

Job summary

Crawford Thomas Recruiting is seeking a Software Developer specializing in security code review to join an onsite team in Orlando, FL. This position requires expertise in identifying vulnerabilities and ensuring applications meet secure coding standards through both manual and automated reviews.

The ideal candidate will have over 5 years of software development experience and at least 2 years focused on application security. This is an excellent opportunity to work in a collaborative environment with significant impact.

Qualifications

• 5+ years of software development experience.
• At least 2 years of experience in application security or secure code review.
• Strong understanding of OWASP Top 10 and cybersecurity frameworks.

Responsibilities

• Perform detailed security-focused code reviews across applications.
• Identify vulnerabilities such as injection flaws and XSS.
• Partner with developers to recommend secure coding practices.

Skills

Secure Software Development Lifecycle

Security code review

Application security

C/C++

JavaScript

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

SonarQube

Fortify

Checkmarx

Veracode

Job description

Software Developer - Security Code Review

Orlando, FL (Onsite Monday-Friday)

Salary: $100k-$125k base salary (negotiable, depending on experience) + quarterly bonus, full benefits, 401(k) with match, and more

Job Summary

Our client is seeking a Security-Focused Software Developer to join their onsite team in Orlando, FL. This role is dedicated to reviewing software code for security vulnerabilities and ensuring applications meet secure coding standards. Unlike traditional software development positions, the primary responsibility will be performing manual and automated security code reviews, identifying vulnerabilities, and helping development teams strengthen application security.

Job Responsibilities

• Perform detailed security-focused code reviews across multiple applications and programming languages.
• Identify vulnerabilities such as injection flaws, cross-site scripting (XSS), insecure deserialization, authentication weaknesses, and insecure APIs.
• Partner with developers to promote secure coding practices and recommend remediation strategies.
• Ensure adherence to security standards, including OWASP Top 10, CWE, and NIST frameworks.
• Collaborate with security, architecture, and DevSecOps teams to improve application security.
• Utilize security analysis tools such as SonarQube, Fortify, Checkmarx, Veracode, or similar platforms.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of software development experience.
• At least 2 years of experience in application security, secure code review, or software security.
• Strong understanding of Secure Software Development Lifecycle (SSDLC).
• Experience reviewing and securing code written in languages such as C/C++, C#, Swift, Java, JavaScript, or Python.
• Familiarity with security tools, including SonarQube, Fortify, Checkmarx, Veracode, or similar solutions.
• Strong knowledge of OWASP Top 10, CWE/SANS Top 25, and CVSS scoring.
• OSCP, CSSLP, CEH, GWAPT, or similar security certifications preferred.
• Familiarity with threat modeling, penetration testing, red team, or blue team activities preferred.

About The Company

Our client is a rapidly growing global cybersecurity leader trusted by organizations around the world to secure servers, endpoints, and critical business systems. Their innovative platform helps businesses prevent unauthorized software execution, reduce cyber risk, and maintain operational security. They offer a collaborative, fast-paced environment where employees have the opportunity to make a significant impact while continuing to grow their careers.