IT Security Auditor

Job Summary for IT Security Auditor (Dimondale, MI)

• Serve as a Senior Full Stack Application Development Security Auditor focused on secure platform and application design.
• Conduct Dynamic, Static, and Software Composition Analysis (DAST, SAST, SCA) assessments on software systems.
• Collaborate with software development teams to promote and implement secure coding practices.
• Guide and lead efforts to automate secure configuration, verification, compliance, and authorization of systems using orchestration and automation tools.
• Advise on and implement security patterns and practices for continuous compliance and risk mitigation.
• Work with distributed teams to transform and enhance secure software development lifecycle processes.
• Utilize application security tools such as Coverity, BlackDuck, SRM, Fortify, and others.
• Analyze and explain security vulnerabilities including those listed in the OWASP Top 10 (e.g., XSS, injection, CSRF, SSRF).
• Assess and secure web, API, and cloud (Azure, AWS, Google Cloud Platform) based applications, including containerized environments.
• Apply federal, industry, and open-source security standards and guidelines (OWASP, SANS, CERT, etc.).
• Work with multiple programming languages and frameworks such as Angular, React, Node.js, Java, Spring Boot, .NET, and related stacks.
• Ensure compliance through secure application development, networking, infrastructure, and security automation (DevSecOps).
• Participate in hybrid work environment—on-site two days a week (Wednesdays and Thursdays required).
• Local candidates only; must be able to attend in-person interviews and pass a CJIS background check.
• Minimum qualifications: 5+ years IT experience, 3+ years in secure coding and application security, and experience with both compiled and interpreted languages.