Conduct system/web application vulnerability assessments, penetration testing, and secure code analysis (white-box) to identify and mitigate security risks.
Design and implement security controls and secure system architectures, including understanding identity management and authentication protocols.
Provide remediation guidance to product teams, identifying compensatory controls and ensuring issues are addressed promptly.
Collaborate with cross-functional teams to ensure security best practices are integrated into the product development lifecycle.
Perform detailed security assessments using various security tools (SAST, DAST, Vulnerability Management, Penetration Testing, etc.).
Conduct Threat Modeling and advise on security vulnerabilities in the development of microservices, RESTful frameworks, and embedded authentication systems.