Sr. .NET Developer and Security Lead

Senior .NET Developer

Key Responsibilities:

• Lead the design, development, and deployment of enterprise-grade applications using

  C#, ASP.NET, MVC, and .NET Core

  .
• Ensure

  secure coding practices

  in line with OWASP, SANS Top 25, and organizational standards.
• Conduct and guide team members in

  Vulnerability Assessment (VA)

  and

  Secure Code Development (SCD)

  .
• Review and implement

  modern security headers

  including CSP, HSTS, X-Content-Type-Options, X-Frame-Options, etc.
• Configure, optimize, and troubleshoot

  IIS web servers

  to ensure secure and high-performing hosting environments.
• Collaborate with application owners and

  conduct security-focused meetings with HODs

  to communicate risks, mitigation plans, and progress updates.
• Act as a subject matter expert during

  security audits, assessments, and compliance checks

  .
• Develop and maintain

  technical documentation

  , including security guidelines, server configurations, and incident reports.

• Mentor and lead

  a team of developers and security analysts to instill a culture of secure development practices.

Required Skills & Qualifications:

• Strong hands-on experience with

  C#, ASP.NET, MVC, and .NET Core

  .
• Deep understanding of

  IIS server architecture

  and web application deployment best practices.
• Expertise in

  application security

  , including

  VA tools

  ,

  OWASP Top 10

  ,

  SANS Top 25

  , and

  CWE

  .
• Proficient in applying

  HTTP security headers

  and other web application security mechanisms.
• Excellent analytical, troubleshooting, and problem-solving skills.
  
• Strong communication and stakeholder management skills.
  
• Experience in leading teams and working in cross-functional environments.
  

Preferred Qualifications:

• Certifications such as

  CEH

  ,

  OSCP

  ,

  CSSLP

  , or

  Microsoft Security Certifications

  .
• Exposure to

  DevSecOps practices

  and CI/CD security integration.
• Familiarity with

  cloud security

  (Azure/AWS) and containerized application security (Docker/Kubernetes).