New Jersey, USA (Hybrid - 3 Days Onsite) (Mandate in person)
Experience:
10+ Years Job Summary We are looking for a Lead Security Test Engineer with strong DevSecOps and Application Security experience to design, implement, and execute security testing throughout the software development lifecycle. The ideal candidate will have hands-on experience with
SAST, DAST, SCA, API
Security, Penetration Testing, Vulnerability Assessment, and Threat Modeling , along with the ability to integrate security testing into CI/CD pipelines. Key Responsibilities Design and execute security testing strategies for web applications, APIs, microservices, mobile applications, and cloud environments . Perform
SAST, DAST, SCA, API
security, container security, and infrastructure security testing . Conduct vulnerability assessments and penetration testing and validate remediation. Integrate security testing tools and automated security gates into CI/CD pipelines . Develop security testing automation using Python, Java, JavaScript, or Bash . Collaborate with Development, QA, DevOps, Cloud, and Security teams to identify and remediate vulnerabilities early. Implement shift-left security and DevSecOps controls across the SDLC. Configure and manage security tools for SAST, DAST, SCA, secrets scanning, container scanning, and IaC security. Perform security testing of Docker/Kubernetes environments . Test REST and GraphQL APIs , including authentication and authorization mechanisms. Integrate security checks with Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps , or similar tools. Analyze vulnerability findings, prioritize risks, and track remediation through closure. Develop security test cases, automation frameworks, reports, and security metrics. Participate in threat modeling and security architecture reviews . Support security and compliance standards including OWASP Top 10, OWASP ASVS, SANS, NIST, and CIS Controls . Stay current with emerging security threats, testing methodologies, and DevSecOps tools. Mandatory Skills Application Security Testing
SAST DAST SCA API
Security Testing Penetration Testing Vulnerability Assessment Threat Modeling OWASP DevSecOps Security Test Automation CI/CD Security Integration Desirable Skills AWS Secrets Manager AWS / Cloud Security Docker / Kubernetes Security REST / GraphQL API Security Jenkins / GitHub Actions / GitLab CI/CD / Azure DevOps Ideal Candidate Looking for a senior/lead-level Application Security or Security Testing professional with 10+ years of experience who can independently drive security testing and DevSecOps initiatives. candidates will have a combination of: Application Security + Security Testing + DevSecOps + Automation + Cloud Security
