IT Security Officer (Consultant) – Application Security

Experience Required: 4+ years

About the Role

We are seeking an experienced IT Security Officer (Application Security) to support the secure design, development, and deployment of applications and cloud-based solutions. You will work closely with development teams, project stakeholders, and cloud engineers to identify security risks, implement security controls, and ensure security best practices are integrated throughout the software development lifecycle.

• Conduct application security reviews and threat modelling to identify and address security risks.
• Provide guidance to development teams on secure coding and application security requirements.
• Implement security testing within CI/CD pipelines and support DevSecOps practices.
• Perform vulnerability assessments using tools such as Fortify-on-Demand and SonarQube.
• Manage and track security vulnerabilities, ensuring timely remediation and patching.
• Review and secure web applications, mobile applications, APIs, and cloud environments.
• Ensure compliance with security standards, best practices, and OWASP guidelines.
• Conduct security awareness training and provide security advice to project teams.
• Work closely with stakeholders to integrate security requirements into project delivery.

• Minimum 4 years of experience in software development, application security, and/or cloud security.
• Strong understanding of application security principles, threat modelling, and secure software development practices.
• Familiarity with web and mobile application architectures, APIs (REST/SOAP), and SSL/TLS.
• Experience with Agile, DevOps, and CI/CD methodologies.
• Hands-on experience with security testing tools such as Fortify-on-Demand, SonarQube, or similar solutions.
• Knowledge of cloud platforms, preferably AWS.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.
• Ability to work independently and collaboratively in a fast-paced environment.

• Relevant security certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.
• Experience working with Government Commercial Cloud (GCC) environments.
• Knowledge of OWASP Top 10 and OWASP ASVS