Cyber Security

Job Summary


What You Do (No Excuses, Real Work)

• Actively run SAST DAST scans on applications and APIs.
• Implement security checks inside CI/CD pipelines (not just suggest them).
• Ensure security processes are followed, flagged, and fixed no silent bypasses.
• Work directly with Developers DevOps to close vulnerabilities.
• Validate fixes and re-test until closure.
• Maintain security reports, scan results, and remediation status.
• Identify gaps in current security workflows and help improve them.
• Own security hygiene and make sure it doesn slip.

What We Expect

Must-Have

• Proven hands-on experience with SAST / DAST through internships, industry training, academic or personal security projects.
• Working knowledge of application security processes.
• Familiarity with OWASP Top 10 vulnerabilities.
• Understanding of CI/CD pipelines and how security fits into them.
• Ability to read scan outputs, understand risks, and communicate fixes clearly.
• Strong follow-through mindset issues are tracked until resolved.
• Comfortable calling out when processes are not being followed.

Good to Have (Strong Advantage)

• Hands-on exposure to tools like OWASP ZAP, Burp Suite.
• Snyk, SonarQube, Trivy.
• Basic knowledge of cloud environments (AWS/GCP/Azure).
• Experience with Docker, Kubernetes, or container security.
• Understanding of API security, authentication, and authorization.
• Any real-world security assessment, PoC, or bug-finding experience.

Who Should NOT Apply

• If you only know security theory.
• If youve never run a real security scan.
• If you avoid accountability or ownership.
• If process enforcement feels too strict for you.

What You Gain

• Real-world DevSecOps experience.
• Exposure to production-grade security workflows.
• Direct collaboration with engineering DevOps teams.
• Ownership of security processes that actually matter.
• Strong foundation for roles in Application Security / DevSecOps.

Bonus Points

• GitHub with security projects.
• Reports from security tools youve used.
• Blog posts / write-ups / labs / CTF experience.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.