Software Developer – Security Code Review

SKY VC; Orlando, Northern (FL, KY); Híbrido; USD 110 000 - 140 000; Tempo integral

Resumo da oferta

ThreatLocker is seeking a Security-Focused Software Developer to perform manual and automated code reviews for security vulnerabilities. The in-office role is based in Orlando, FL, and involves collaborating with developers and security teams to strengthen secure coding practices.

Candidates should have a strong SSDLC understanding, 5+ years in software development with 2+ years in secure code review, and familiarity with tools like SonarQube, Fortify, Checkmarx, and Veracode.

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• Minimum 5 years software development with at least 2 years in secure code review.
• Solid understanding of SSDLC and security best practices.
• Familiarity with industry security tools and OWASP Top 10.

Responsabilidades

• Perform in-depth security-focused code reviews across codebases and languages.
• Identify common and advanced security vulnerabilities and provide mitigations.
• Educate developers on secure coding practices and secure design.
• Recommend fixes and ensure alignment with security standards (OWASP Top 10, CWE, NIST).
• Collaborate with security engineers and DevSecOps to improve security posture.
• Document findings and track remediation status.
• Utilize static and dynamic analysis tools to supplement reviews.
• Participate in security audits, threat modeling, and secure code training.

Conhecimentos

Analytical skills

Communication

Documentation

SSDLC knowledge

Formação académica

Bachelor’s degree in Computer Science or Cybersecurity

5+ years in software development; 2+ years in secure code review/app security

Ferramentas

SonarQube

Fortify

Checkmarx

Veracode

Descrição da oferta de emprego

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Software Developer - Security Code Review

Full Time Orlando, FL, US

30+ days ago Requisition ID: 1025

COMPANY OVERVIEW

ThreatLocker® is a global cybersecurity leader that stops cyberattacks before they happen. The company’s Zero Trust Platform prevents breaches from both known and unknown threats by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems. Built to deploy quickly and scale across complex environments, the platform reduces operational overhead while keeping business running uninterrupted. Headquartered in Orlando, Florida, with offices in Dublin, Dubai, and Brisbane, ThreatLocker protects over 70,000 organizations worldwide.

POSITION OVERVIEW

We are looking for a Security-Focused Software Developer to join our onsite team, specializing exclusively in manual and automated code review for security vulnerabilities. In this role, you will not be writing production code but will be deeply involved in reviewing application code to identify security issues, enforce secure coding practices, and ensure compliance with industry security standards.

The role will be based in Orlando, FL and is an in-office position.

KEY RESPONSIBILITIES

• P erform in-depth security-focused code reviews across various codebases and languages
• I dentify common and advanced security vulnerabilities (e.g., injection, XSS, insecure deserialization, insecure APIs).
• W ork closely with developers to educate and guide them in secure coding practices.
• R ecommend fixes and mitigation strategies, ensuring adherence to security standards (e.g., OWASP Top 10, CWE, NIST).
• C ollaborate with security engineers, architects, and DevSecOps teams to enhance code security posture.
• Ma intain documentation of findings and track remediation status.
• U tilize static and dynamic analysis tools to supplement manual reviews.
• P articipate in security audits, threat modeling, and secure code training sessions.

REQUIRED QUALIFICATIONS

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in software development with at least 2 years in secure code review or application security.
• Strong understanding of secure software development lifecycle (SSDLC).
• Familiarity with security tools such as SonarQube, Fortify, Checkmarx, Veracode, or similar.
• Knowledge of OWASP Top 10, CWE/SANS 25, and CVSS scoring.
• Strong analytical, communication, and documentation skills.

PREFERRED QUALIFICATIONS IN

• Security certifications such as OSCP, CSSLP, CEH, or GWAPT.
• Experience in regulated environments (e.g., finance, healthcare, defense).
• Familiarity with threat modeling, penetration testing, or red/blue team operations.

WORKING CONDITIONS

The duties described below are representative of those encountered while performing the essential functions of this position. If necessary, reasonable accommodation may be requested and will be evaluated for its relationship to the essential functions that must be performed.

• Job will generally be performed in an office environment but may require travel to visit company offices and/or property locations.
• While performing duties of this job, would occasionally require to stand, walk, sit, reach with hands and arms, climb or balance, stoop or kneel, talk and hear, and use fingers and hands to feel objects and tools.
• Must occasionally lift and/or move up to 25 pounds.
• Specific vision abilities required include close vision, distance vision, depth perceptions, and the ability to adjust focus.

A background check and drug/substance screening are required after a conditional offer. Employment will proceed only upon receiving clear results from both.

ThreatLocker also conducts randomized drug and substance testing approximately every 60 days, in line with the same screening standards.