What you’ll do

• Development and Application Security‑by‑Design
• Integrate and operate application security controls within CI/CD pipelines, including: Static Application Security Testing (SAST); Dynamic Application Security Testing (DAST); Software Composition Analysis (SCA); Secrets detection and dependency risk scanning
• Support secure SDLC practices such as: Branch protection and quality gates; Secure build and release controls; Artifact integrity and validation checks
• Assist with threat modelling and secure design reviews in collaboration with architecture teams
• Support developers in vulnerability triage and remediation
• Tune security tools to reduce false positives and developer friction
• Support audit, compliance, and evidence generation activities
• Participate in security incident investigation related to application flaws
• Ensure secure, compliant approaches are the default and easiest options ...