Senior Application Security Engineer DevSecOps and Cloud

Lead Cybersecurity Engineer

Education & Experience:

Bachelor's Degree in computer science or a related field with 8+ years in information security. Master's Degree with 6+ years of experience.

Technical Skills (Required):
Application Security:
Deep understanding of vulnerabilities and remediation (OWASP, CWE/CVE, SANS 25). Broad Security Knowledge:

Experience with enterprise security architecture, threat modeling, vulnerability assessment, risk analysis, defense in depth, SDLC, IAM, and API security. Cloud Security:
Hands-on experience with MS Azure and/or AWS. Development

Experience:

Proficiency in one or more languages (Java, Python, .Net, JS, or equivalent). Automation & Scripting:
Implementation of automation to streamline security processes.

Certifications:

Professional certification such as CISSP, CCSP, GWAPT, GWEB, or AWS Security Specialty.

Technical Skills (Desired):
Professional certifications (CISSP, CCSP, CSSLP, GISCP, GWAPT, GWEB, etc.). Strong understanding and experience with information security technologies. AI Fluency is preferred.

Key Contributions:
Security by Design:
Implementing and consulting on secure development practices. Dev Sec Ops  Integration:
Integrating security into Dev Ops pipelines. Vulnerability Management:
Managing and tracking security risks to remediation. Agile

Collaboration:

Working closely with development teams in an agile environment.

Soft Skills (Required):
Excellent written and verbal communication skills. Demonstrated ability to communicate highly technical security concepts to non-security audiences. Ability to coordinate multiple teams in accomplishing process review and improvement.

Disqualifiers / Red Flags:
Choppy Tenure:
Consistent job-hopping will not be considered.

Location:

Candidates must be local to the Chicago, Peoria, or Dallas offices; non-local candidates will not be considered.