Our client, a Commercial Banking company, is looking for a Application Security Advisor / Trainer (Contractor) for their Remote location.
Responsibilities:
Advise and support application development teams on interpreting and remediating application security findings (static analysis / SAST, software composition analysis / SCA, secrets, API, container, and infrastructure-as-code scanning).
Deliver enablement and training (working sessions, office hours, guides) that help developers understand common vulnerability patterns (CWEs) and the steps to fix them.
Create and maintain self-service documentation, remediation playbooks, and training material.
Partner with security and DevOps teams to support pipeline security integration and vulnerability burndown.
Track remediation progress and help teams prioritize work by risk."