Loading...
Mid LevelFull-timeJavaScriptPythonJavaC#Node.jsCI/CD
Salary Range
$73,440 - $99,360 /year
This salary is estimated based on similar roles. The actual salary may vary.
Description:
For this project, we are forming a team of 6 (including 1 team lead) to assist in a huge government project to perform the following scope of works:
• Security Risk Assessment
• Security Policies, Standards, Guidelines, And Procedures Review
• Security Design
• Application Security
• Vulnerability assessment and
• System Security Acceptance Testing
• Cloud SecurityThe selected candidate will be working collaboratively within the team to fulfil the project requirements. As such, there is no expectation for one individual to possess all skill sets in the 6 domains.
As an expert in Application Security, your role will focus on providing expert advice, conducting security assessments, and helping government teams build security into every stage of their software development lifecycle.
Responsibilities:
• Perform comprehensive risk assessments of development environments, DevOps workflows, and CI/CD processes.
• Perform security assessments, threat modelling, and code reviews to identify vulnerabilities in applications.
• Review and recommend improvements in areas such as identity and access management, network security, secure SDLC practices, source code management, cryptographic key handling, and data protection.
• Guide application teams on adopting secure development practices and integrating security tools such as SAST, DAST, and VAPT into their workflows.
• Review existing CI/CD pipelines from a security perspective and provide expert recommendations to align with DevSecOps principles.
• Mentor and advise internal teams on secure coding practices across various platforms and languages (e.g., JavaScript, Node.js, Java, C#, Python, etc.).
• Develop and maintain secure coding guidelines and security standards.
• Collaborate with development teams to remediate security issues and provide guidance on secure coding practices.
Free to sign up. Takes 30 seconds.
About SopraSteria1
Sopra Steria is a leading European IT consulting and services company that provides digital transformation solutions to help organizations navigate the complexities of the modern business landscape. Established through the merger of Sopra Group and Steria in 2014, the company has built a strong reputation for delivering innovative technology strategies and operational excellence. Headquartered in France, Sopra Steria operates across multiple countries, leveraging decades of industry expertise to serve clients in various sectors, including finance, healthcare, public services, and telecommunications. The company’s global presence and deep technical knowledge enable it to address the unique challenges faced by businesses in an increasingly digital world. Sopra Steria offers a comprehensive suite of services, including IT consulting, application development, infrastructure management, and cybersecurity solutions. Their key features include a client-centric approach, agile methodologies, and a focus on sustainable and ethical technology practices. The company targets large enterprises and public sector organizations that require tailored, scalable solutions to optimize their operations, enhance customer experiences, and drive digital innovation. By combining strategic advisory with cutting-edge technology, Sopra Steria empowers its clients to achieve long-term growth and resilience in competitive markets. Notable achievements include being recognized as a leader in multiple industry analyses and maintaining a strong commitment to corporate social responsibility. Sopra Steria’s unique value proposition lies in its ability to integrate deep domain expertise with advanced technological capabilities, ensuring that clients receive both strategic guidance and practical implementation support. The company’s market position is further strengthened by its collaborative culture and dedication to fostering long-term partnerships, making it a trusted advisor for organizations undergoing digital transformation.
