C#.NET Developer

Overview:

The C#.NET Developer will work closely with both engineering (development) teams and the Information Security group to make sure that client applications are developed with security in mind. Deep awareness of the OWASP Top 10 project and practices for preventing vulnerabilities when developing applications in any tech stack is a key success factor. This person will help to ensure Static Application Security Testing (SAST) occurs during the development lifecycle and that reported vulnerabilities are properly remediated. This person will also help train developers on how to remediate the vulnerabilities and what those vulnerabilities are when needed, Implement OWASP Application Security Verification Standards (ASVS). Additionally, this person role-models for a small team (1-5 others) of persons with similar responsibilities. Excellent communication skills and a good familiarity with DevOps pipelines are key success factors for this role.

Primary Responsibilities:

• Shift-Left security in Software Development Life Cycle (SDLC) for various applications.

•Provide guidelines, tooling, best practices and implement for: o SAST o Dynamic Application Security Testing (DAST) o Software Composition Analysis (SCA) o Runtime Application Self-Protection (RASP) •Provide guidance and coaching to teams regarding security remediation efforts

•Provide guidance to teams on how to properly integrate SAST, DAST, SCA scans into their pipelines

•Work with teams to ensure dependency scans are also part of their development process and pipelines

•Provide ongoing improvements and awareness training on new application threats and remediation techniques

•Provide guidance on OpenID Connect (OIDC) and OAuth2 and other identity-related best practices and practical approaches for client implementation

•Help engineering teams plan long term remediation solutions when deep changes are required for remediation activities

•Collaborate with the Information Security (InfoSec) team on prioritizing both applications and vulnerabilities based on risk

•Provide guidance to teams on proper storage and retrieval of application secrets

Required Skills and Experience:

-5+ years software development experience

-Familiarity with SAST, DAST, SCA Scans - C# .net development primary skill set

-Python or Java Secondary skill set

-Some cloud exposure with hyperscalers (preference is Azure, AWS, or GCP)

Nice to have:

-Fortify on demand

-Invicti Netsparker

The pay is $15/hr to $17/hr depending upon experience.

Exact compensation may vary based on several factors, including skills, experience, and education.

Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.