Software Engineer III

Summary: Experienced Software Security Specialist proficient in fortifying software applications against emerging threats, analyzing and mitigating open-source vulnerabilities, and enhancing collaboration across engineering and security teams
Possesses a developer background with expertise in various application security testing methodologies
Experience:
Software Security Specialist

• Led software security initiatives, advising on best practices, threat detection, and vulnerability remediation.
• Analyzed open-source threats, prioritized high-risk components, and collaborated on mitigation strategies.
• Provided technical guidance on secure coding practices and contributed to future security architecture.
• Managed security tools, documented configurations, and provided stakeholder training.
• Effectively communicated security risks and remediation measures to stakeholders.
• Served as a thought leader, guiding engineering, architecture, and security teams.

Desired Competencies:

• Strong communication skills, both written and verbal.
• Developer background with expertise in application security testing methodologies.
• Proficient in software composition analysis, web application security, static testing, cloud security, and container security.
• Understanding of enterprise and application-level security architecture.
• Familiarity with industry standards such as OWASP, WASC, CWE, CVE, etc.
• Experience collaborating with development, architecture, and security teams.
• Hands-on experience with security tools like Sonatype, Black Duck, Snyk, GitHub, SonarQube, AWS technologies, containers (Dockers), and infrastructure as code (Terraform or similar).