2 days ago
Rome, ItalyMid Level
Responsibilities
- Collaborate with development teams to implement secure coding best practices and application security controls.
- Identify, analyze, assess, and remediate application vulnerabilities through source-code review and risk evaluation.
- Perform penetration testing and static and dynamic security analysis.
- Train developers and stakeholders on application security and vulnerability mitigation.
- Support the use of security analysis tools, vulnerability scanners, Azure security services, WAF, API Management, and Application Gateways.
- Integrate SAST and DAST security tools into CI/CD development pipelines.
Requirements
- Knowledge of web communication protocols, web architectures, and application technologies such as HTTP, HTTPS, REST, and SOAP.
- Familiarity with at least one of Java, Python, C#, JavaScript, Ruby, or PHP.
- Knowledge of common vulnerabilities including SQL injection, cross-site scripting, authentication vulnerabilities, and sensitive-data exposure.
- Understanding of OWASP application security practices, session management, data encryption, input validation, and secure authentication.
- Ability to use static and dynamic code analysis tools, vulnerability scanners, and related security resources.
- General knowledge of Azure resources and services, their configuration, and security tools such as Defender for Cloud.
- Knowledge of WAF, API Management, Application Gateways, and SAST/DAST integration into CI/CD pipelines.
- Written and spoken English proficiency, along with clear communication with development teams and stakeholders.
Benefits
- Training, professional development pathways, and opportunities to obtain certifications through partnerships with Microsoft and other industry providers.
- Flexible and smart-working programs.
- Personalized benefits including discounts, services, and corporate well-being plans.
- The role is offered under Italian CCNL Terziario, Distribuzione e Servizi contract levels 3 or 4.
Tech Stack
Categories
About Avanade
Avanade is the world’s leading expert on Microsoft. Trusted by over 7,000 clients worldwide, we deliver AI-driven solutions that unlock the full potential of people and technology, optimize operations, foster innovation and drive growth. As Microsoft’s Global SI Partner we combine global scale with local expertise in AI, cloud, data analytics, cybersecurity, and ERP to design solutions that prioritize people and drive meaningful impact. We champion diversity, inclusion, and sustainability, ensuring our work benefits society and business.