about 3 hours ago
Responsibilities
- Perform SAST, DAST, SCA, red team exercises, penetration testing, and manual code reviews on applications and APIs.
- Prioritize vulnerabilities using CVSS and business context, then execute code-level patches and infrastructure configuration fixes.
- Configure, manage, and optimize enterprise security scanners to reduce noise and improve actionable findings.
- Embed automated security scanning, dynamic secrets management, and compliance gates into GitHub Actions pipelines.
- Conduct architecture security reviews and threat modeling based on OWASP SAMM principles.
- Secure and harden AWS cloud environments, containerized workloads, hybrid architecture, and on-premise infrastructure.
Requirements
- Proven expertise in penetration testing, red teaming, manual code reviews, and dynamic application security analysis.
- Hands-on experience configuring and operating Wiz, Snyk, Qualys, SonarQube, Burp Suite, OWASP ZAP, and automated DAST platforms.
- Ability to read, refactor, and patch vulnerable code across .NET, Java, and React stacks.
- Experience embedding security into GitHub Actions pipelines and implementing dynamic secrets management with AWS KMS, HashiCorp Vault, and IAM.
- Strong command of OWASP Top 10, OWASP SAMM, threat modeling methodologies, and Software Bill of Materials tracking.
- Experience securing AWS environments, IAM policies, network controls, hybrid infrastructure, and on-premise systems.
- Preferred certifications include OSCP, OSWE, CISSP, GWAPT, or AWS Certified Security – Specialty.
- Preferred familiarity with HIPAA, HITRUST, PCI-DSS, legacy monolithic architecture refactoring, Docker, Kubernetes/EKS, runtime security monitoring, GCP, Git, and secure API integration.
- Preferred ability to use AI tools to improve drafting, analysis, research, or process automation.
Benefits
- High-impact environment with professional development opportunities, flexible and collaborative culture, global opportunities, vibrant community, and total rewards.
- Employment type and location determine specific benefits.
Tech Stack
Categories
About Wizeline
Wizeline, a global technology services provider, builds the best digital products and platforms at scale. We focus on measurable outcomes, partnering with our customers to modernize core technologies, mature data-driven capabilities, and improve user experience.