Description: Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
Support application teams in adopting modern application security scanning and remediation practices. This role helps developers understand and act on security findings and delivers hands-on enablement and training to accelerate remediation and reduce risk across the software development lifecycle.
Bachelor Degree: (Required, Preferred or Not Required)
Preferred (equivalent coursework, internships, certifications, or hands-on experience considered in lieu of a degree).
Role Responsibilities: (what they will be doing)
Advise and support application development teams on interpreting and remediating application security findings (static analysis / SAST, software composition analysis / SCA, secrets, API, container, and infrastructure-as-code scanning).
Deliver enablement and training (working sessions, office hours, guides) that help developers understand common vulnerability patterns (CWEs) and the steps to fix them.
Create and maintain self-service documentation, remediation playbooks, and training material.
Partner with security and DevOps teams to support pipeline security integration and vulnerability burndown.
Track remediation progress and help teams prioritize work by risk.
Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
Ability to explain technical security concepts clearly to developers (strong written and verbal communication).
Experience creating documentation or delivering training / enablement content.
Plus/Nice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
Exposure to CI/CD pipeline security integration.
Familiarity with container and cloud security scanning concepts.
Experience with vulnerability management workflows and ticketing.
Relevant coursework, internships, certifications, or personal projects in application or security engineering.
EEO
“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”