johnson@motionrecruitment.comPLEASE NOTE: Per Client Requirement – Not open to H1B, C2C, TN Visa, 1099, F1- CPT or OPT at this timeRole:Responsible for developing, managing, and delivering secure code requirements and designs for application teams to follow as they develop secure code.Will analyze and recommend improvements for vulnerability remediation for impacted applications.Work with application development and software engineering teams to build consensus in resolution of issues and optimize performance.In this role, you will:Develop and maintain secure coding standards and guidance.Lead vulnerability remediation prioritization efforts.Optimize methods for delivering security-by-design to reduce risk, while improving code delivery velocity.Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards.Support control design and execution.Identify security vulnerabilities and issues and evaluate remediation alternatives.Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals.Required Qualifications:4+ years of Information Security Engineering experience4+ years of experience with cybersecurity frameworks such as NIST Secure Software Development Framework (SSDF) or OWASP Application Security Verification Standards (ASVS)4+ years of Application Security experienceDesired Qualifications:Experience with SD ElementsExperience with vulnerability management / vulnerability operations, specifically in Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Penetration TestingExperience with DevSecOpsExperience with Azure Cloud and Google Cloud platformsExperience with Artificial Intelligence applicationsExperience executing controls and responding to tests or audits of controlsCoding/Scripting experience with Python, Excel VBA, PowerShell, JavaScriptExperience with Tableau or Power BI dashboardsExcellent data engineering skills, ETL, statistical analysis, business intelligence / reporting skillsCybersecurity Certifications: CISSP, CompTIA Security+, CISM, GIAC, SDDLP, GSEC, or CCSP