Responsibilities

The Senior Information Security Engineer will analyze results from SAST, DAST, and SCA tools, delivering clear and actionable remediation guidance to engineering teams. They will collaborate with developers to resolve vulnerabilities and promote secure coding practices, develop and maintain security guidelines aligned with OWASP standards, conduct threat modeling and application-level risk assessments, provide expertise on container security in Azure, track and manage remediation efforts, build and maintain robust vulnerability management processes, partner with DevOps to embed security controls into CI/CD pipelines, create security documentation, lead penetration testing initiatives, and support incident response efforts related to application vulnerabilities. They will also oversee the organization’s vulnerability management program and ensure comprehensive coverage and effective risk mitigation.