О позицији
The role focuses primarily on integrating security into software development, reviewing code and architecture, and securing CI/CD pipelines. The position also includes cloud, infrastructure, Blue Team, network security, and compliance activities.
Responsibilities
- Join planning sessions, lead threat modeling, and review security-critical pull requests as a collaborative partner.
- Continuously assess the codebase, prioritizing authentication, authorization, cryptography, API security, and sensitive data handling.
- Introduce and maintain SAST, dependency scanning, secret detection, and other automated security checks across CI/CD pipelines.