Lead Security Test Engineer ? DevSecOps
Listed on 2026-08-28
-
IT/Tech
Cybersecurity, Security Management & Operations, Information Security & Data Protection, Cloud Computing: Infrastructure & Operations
Role:
Lead Security Test Engineer - Dev Sec Ops
Location: New Jersey, USA (Hybrid - 3 Days Onsite) (Mandate in person)
Experience: 10+ Years
Job Summary
We are looking for a Lead Security Test Engineer with strong Dev Sec Ops and Application Security experience to design, implement, and execute security testing throughout the software development lifecycle.
The ideal candidate will have hands-on experience with SAST, DAST, SCA, API Security, Penetration Testing, Vulnerability Assessment, and Threat Modeling
, along with the ability to integrate security testing into CI/CD pipelines.
Key Responsibilities
Design and execute security testing strategies for web applications, APIs, microservices, mobile applications, and cloud environments
.Perform SAST, DAST, SCA, API security, container security, and infrastructure security testing
.Conduct vulnerability assessments and penetration testing and validate remediation.
Integrate security testing tools and automated security gates into CI/CD pipelines
.Develop security testing automation using Python, Java, JavaScript, or Bash
.Collaborate with Development, QA, Dev Ops, Cloud, and Security teams to identify and remediate vulnerabilities early.
Implement shift-left security and Dev Sec Ops controls across the SDLC.
Configure and manage security tools for SAST, DAST, SCA, secrets scanning, container scanning, and IaC security.
Perform security testing of Docker/Kubernetes environments
.Test REST and GraphQL APIs
, including authentication and authorization mechanisms.Integrate security checks with Jenkins, Git Hub Actions, Git Lab CI/CD, Azure Dev Ops
, or similar tools.Analyze vulnerability findings, prioritize risks, and track remediation through closure.
Develop security test cases, automation frameworks, reports, and security metrics.
Participate in threat modeling and security architecture reviews
.Support security and compliance standards including OWASP Top 10, OWASP ASVS, SANS, NIST, and CIS Controls
.Stay current with emerging security threats, testing methodologies, and Dev Sec Ops tools.
Mandatory Skills
Application Security Testing
SAST
DAST
SCA
API Security Testing
Penetration Testing
Vulnerability Assessment
Threat Modeling
OWASP
Dev Sec Ops
Security Test Automation
CI/CD Security Integration
Desirable Skills
AWS Secrets Manager
AWS / Cloud Security
Docker / Kubernetes Security
REST / GraphQL API Security
Jenkins / Git Hub Actions / Git Lab CI/CD / Azure Dev Ops
Ideal Candidate
Looking for a senior/lead-level Application Security or Security Testing professional with 10+ years of experience who can independently drive security testing and Dev Sec Ops initiatives.
candidates will have a combination of:
Application Security + Security Testing + Dev Sec Ops + Automation + Cloud Security
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).