Application Security & Cloud Engineer
Posted Updated
Description
- Improve SAST tooling integration into CI/CD pipelines -: gate builds on critical/high findings
- Establish structured DAST scanning cycle -: integrate into pre-production release gates
- Formalise VA/PT programme -quarterly internal VA, bi-annual external PT with tracked remediation SLAs
- Manage WAF policies - review rule sets, tune false positives, ensure coverage for all public-facing APIs and web applications
- Drive CSPM on SentinelOne (or alternate tool) - remediate cloud misconfigurations with a target of zero critical findings
- Own the JIRA Security Review process.
- Collaborate with development teams on secure code review and threat modelling.
