Lead Security Test Engineer ? DevSecOps

Role: Lead Security Test Engineer - DevSecOps

Location: New Jersey, USA (Hybrid - 3 Days Onsite) (Mandate in person)

Experience: 10+ Years

Job Summary

We are looking for a Lead Security Test Engineer with strong DevSecOps and Application Security experience to design, implement, and execute security testing throughout the software development lifecycle.

The ideal candidate will have hands-on experience with SAST, DAST, SCA, API Security, Penetration Testing, Vulnerability Assessment, and Threat Modeling, along with the ability to integrate security testing into CI/CD pipelines.

Key Responsibilities

• Design and execute security testing strategies for web applications, APIs, microservices, mobile applications, and cloud environments.

• Perform SAST, DAST, SCA, API security, container security, and infrastructure security testing.

• Conduct vulnerability assessments and penetration testing and validate remediation.

• Integrate security testing tools and automated security gates into CI/CD pipelines.

• Develop security testing automation using Python, Java, JavaScript, or Bash.

• Collaborate with Development, QA, DevOps, Cloud, and Security teams to identify and remediate vulnerabilities early.

• Implement shift-left security and DevSecOps controls across the SDLC.

• Configure and manage security tools for SAST, DAST, SCA, secrets scanning, container scanning, and IaC security.

• Perform security testing of Docker/Kubernetes environments.

• Test REST and GraphQL APIs, including authentication and authorization mechanisms.

• Integrate security checks with Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, or similar tools.

• Analyze vulnerability findings, prioritize risks, and track remediation through closure.

• Develop security test cases, automation frameworks, reports, and security metrics.

• Participate in threat modeling and security architecture reviews.

• Support security and compliance standards including OWASP Top 10, OWASP ASVS, SANS, NIST, and CIS Controls.

• Stay current with emerging security threats, testing methodologies, and DevSecOps tools.

Mandatory Skills

• Application Security Testing

• SAST

• DAST

• SCA

• API Security Testing

• Penetration Testing

• Vulnerability Assessment

• Threat Modeling

• OWASP

• DevSecOps

• Security Test Automation

• CI/CD Security Integration

Desirable Skills

• AWS Secrets Manager

• AWS / Cloud Security

• Docker / Kubernetes Security

• REST / GraphQL API Security

• Jenkins / GitHub Actions / GitLab CI/CD / Azure DevOps

Ideal Candidate

Looking for a senior/lead-level Application Security or Security Testing professional with 10+ years of experience who can independently drive security testing and DevSecOps initiatives.

candidates will have a combination of: Application Security + Security Testing + DevSecOps + Automation + Cloud Security