Security Auditor

Introduction:

This position is not a member of the Security Operations Center, rather it is dedicated to working with software development teams on secure coding practices. Candidates must have a strong development background.

Responsibilities:

• Work closely with software development teams to ensure secure coding practices
• Utilize Application Security scanning tools such as SAST, DAST, SCA, ASOC, Container/Cloud
• Understand and analyze HTTP Request/Response headers for web and Restful API calls
• Explain in detail any of the OWASP top 10 vulnerabilities
• Identify and address vulnerabilities such as Cross Site Scripting, Injection attacks, SSRF, CSRF, XML entity, etc.

Requirements:

Required Skills:

• Experience with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud)
• Knowledge of HTTP Request/Response headers for web and Restful API calls
• Ability to explain in detail any of the OWASP top 10 vulnerabilities

Preferred Skills:

• Experience with Security Operations Center (SOC)
• Familiarity with security standards and compliance
• Strong understanding of cybersecurity principles