Application Security Lead

STARTICA is looking for Application Security Lead to join an amazing Security team in a fast-growing unicorn!

You will have the unique opportunity to design, implement, and maintain various security controls for the software solution suite. You will assist with securing the applications, the software supply chain, the CI/CD pipeline, and the production environments. The ideal candidate will have strong knowledge of container and Kubernetes security, cloud security, and securing native cloud workloads.

Key Responsibilities:

• Design, implement, and maintain security controls throughout the software development lifecycle.

• Collaborate with other teams to ensure a secure design and to integrate security into all stages of the software development lifecycle.

• Conduct vulnerability management, security testing, penetration testing, security assessments & audits, and ensure compliance with industry standards and regulations.

• Maintain and monitor security controls and policies across all environments, including cloud platforms and native cloud workloads.

• Collaborate with the research team to mitigate emerging security threats and vulnerabilities, and enrich the research team with valuable data from your findings.

• Secure the software supply chain, third-party components, and dependencies.

Requirements:

• Bachelor's degree in Computer Science or a related field.

• Strong understanding of application security principles and practices, vulnerability management, and DevSecOps methodologies for a cloud-native environment.

• Minimum of 3 years of software development experience, with experience in at least one modern programming language, such as Python, JS, or Go.

• At least 7 years of experience in application security, including experience as a security lead or similar role.

• Strong knowledge of container and Kubernetes security, cloud security, IaaC, and securing native cloud workloads.

• Experience with securing the software supply chain, third-party components, and dependencies.

• Knowledge of security standards and regulations such as OWASP ASVS, NIST, and ISO.

• Excellent communication, interpersonal, and collaboration skills.

• Strong problem-solving skills and the ability to work in a fast-paced and dynamic environment.