SOC Lead II

Core Responsibilities

• SDLC Integration: Manage the integration of security tools and processes (SAST, DAST, SCA) using Checkmarx tool into CI/CD pipelines.
• Vulnerability Remediation: Coordinate with development teams to triage, track, and close security flaws identified during penetration tests or automated scans.
• Stakeholder Management: Serve as the primary point of contact between technical AppSec engineers, product owners, and executive leadership to report on the "security posture" of applications.
• Program Governance: Develop and monitor project plans for AppSec initiatives, such as implementing a new bug bounty program or maturing a threat modeling process.
• Risk Mitigation: Proactively identify and escalate blockers that impact the delivery of secure software or compliance with standards like ISO/IEC 27001 or PCI DSS.
• Tooling: Experience with vulnerability management platforms (e.g., Checkmarx, WIZ, Qualys) and project tracking tools like Jira.

• Project Management: Proficiency in Agile/Scrum methodologies and tools like Jira.
• Technical Literacy: Familiarity with the OWASP Top 10, secure coding standards, and cloud security (AWS/Azure/GCP).
• Communication: Ability to translate complex technical vulnerabilities into business risks for non-technical stakeholders.

application security,angular,node.js,vulnerability scanning,