Bachelor's Degree (accredited) in Computer Science, MIS, Business Administration or similar area of study or in lieu of degree, High School Diploma or GED (accredited) and four years of relevant work experience.
Seven years of prior work experience (in addition to education requirement).
Certified Information Systems Security Professional (CISSP).
Certified Information Systems Auditor (CISA).
Certified Information Security Manager (CISM).
Fortune 500 experience.
Deep understanding of application security principles and secure coding practices
Ability to design and implement security controls in CI/CD pipelines
Strong analytical and problem-solving skills with attention to detail
Excellent communication and collaboration skills to work with cross-functional teams
Ability to produce clear and actionable security reports and dashboards for stakeholders
Ability to create and deliver presentations targeted to either end users or senior management
SAST (Static Application Security Testing)
DAST (Dynamic Application Security Testing)
IAST (Interactive Application Security Testing)
SCA (Software Composition Analysis / open-source dependency scanning)
API security (API discovery, auth testing, schema validation, runtime protection)
RASP (Runtime Application Self-Protection)
Pen-test automation / BAS for apps (continuous validation of controls)
SBOM (software bill of materials) & supply chain security provenance/attestation
Experience in several or more of the following application security technologies: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), IAST (Interactive Application Security Testing), SCA (Software Composition Analysis / open-source dependency scanning), API security (API discovery, auth testing, schema validation, runtime protection), RASP (Runtime Application Self-Protection), Pen-test automation / BAS for apps (continuous validation of controls) and SBOM (software bill of materials) & supply chain security provenance/attestation
Experience in the areas of change control, problem management, incident management troubleshooting security solutions
Ability to handle successfully multiple projects at one time