About Collabera:
Collabera is a leading global technology services and solutions provider committed to delivering high-quality, innovative solutions to our clients. Our diverse, global talent helps clients transform every aspect of their business and achieve exceptional results. We achieve success through collaboration and the use of our digital platforms. With AI, our extensive talent network and in-depth learning solutions on the newest technologies, we provide the best Talentforce for today, tomorrow, and the next ERA.
Job Summary:
We are seeking a highly skilled Senior Application Security Engineer with hands-on .NET development expertise and a strong application security background. In this role, you will lead the integration and customization of security tools into CI/CD pipelines, ensuring secure code practices across the organization. You will take a proactive role in both coding and analyzing code, working closely with development teams to maintain a secure SDLC.
Responsibilities:
- Lead day-to-day application security activities, ensuring the adoption of security best practices.
- Conduct hands-on development using C# and .NET Core.
- Integrate security tools (Checkmarx, BlackDuck, GitHub Advanced Security - CodeQL, Dependabot, Secrets, Jfrog Xray, CycloneDX, Fortify, WebInspect, AppScan, Invicti Netsparker, Trufflehog, OWASP Dependency Check, ZAP) into CI/CD pipelines.
- Customize security queries and rules within the tools to enhance the identification of vulnerabilities.
- Conduct code reviews and static/dynamic code analysis (SAST/DAST) to identify potential security issues.
- Collaborate with cross-functional teams to ensure security controls are integrated throughout the SDLC.
- Drive cloud security best practices, focusing on Azure or GCP environments.
- Ensure the implementation of security standards and compliance with internal and external requirements.
- Work in an Agile environment, contributing to security efforts within iterative development cycles.
Must-Have Qualifications:
- Application Security background with proven experience in securing applications across the SDLC.
- Engineering background with strong hands-on development experience in C# / .NET Core.
- Cloud experience, specifically with Azure or GCP (AWS experience is not required).
- Expertise in CI/CD pipeline integration and automation for security tools.
- Experience in SAST/DAST tools and methodologies.
- Familiarity with Agile methodologies and practices.
- Enterprise-level experience working on large-scale applications with stringent security requirements.
Preferred Tools/Technologies:
- Checkmarx, BlackDuck, GitHub Advanced Security (CodeQL, Dependabot, Secrets), Jfrog Xray, CycloneDX, Fortify, WebInspect, AppScan, Invicti Netsparker, Trufflehog, OWASP Dependency Check, ZAP
Why Join Collabera?
- Opportunity to work with a leading IT and professional services company.
- Collaborative and dynamic work environment.
- Competitive compensation package.
- Professional growth and development opportunities.
How to Apply:
If you are a motivated individual with a passion for technology and a drive to provide excellent support, we encourage you to apply. Visit "Apply Now" to start the application and upload your resume.
