Senior Application Developer

Senior Application Developer with a Cybersecurity Background

We need a Senior Application Developer with a Cybersecurity Background that can design, build, and secure software, focusing on integrating security into the SDLC (Software Development Lifecycle) through secure coding, threat modeling, vulnerability assessment, DevSecOps, SAST/DAST tools, and implementing OWASP/MITRE best practices. The role requires skills languages in Python, Java, Apache, NGINX, my MySQL, and PostgreSQL.

Our ideal candidate will be focused on hands-on technical implementation rather than policy management, and bridge communication between development and security with the following key responsibilities:

Secure Development & Code Security

• Lead secure coding practices, code reviews, and SAST/DAST integration
• Implement security controls in application architecture and APIs
• Manage vulnerability remediation in application code

Infrastructure & Cloud Security

• Secure cloud configurations and container/orchestration security
• Implement encryption, secrets management, and secure authentication
• Monitor application security logs and anomalies

Compliance & Documentation

• Support SOC 2 and compliance audits with technical evidence
• Document security controls and development processes
• Maintain security requirements in SDLC

Identity & Access Controls

• Implement OAuth, SSO, MFA, and authorization frameworks
• Design role-based access control (RBAC) in applications
• Secure API authentication and rate limiting

Risk & Threat Management

• Conduct threat modeling for new features and architecture
• Perform security testing and remediate findings
• Assess third-party dependencies and libraries

Incident Response

• Investigate and respond to application security incidents
• Implement logging, monitoring, and alerting for security events
• Support forensics and root cause analysis

Security Leadership

• Mentor developers on secure coding practices
• Champion security in development culture
• Bridge communication between development and security teams