Lead Application Security Engineer

Lead Application Security Engineer at Xello. Remote. 3-6 years experience. Secure SDLC, SAST/SCA, CI/CD security.

• Formation and development of secure SDLC processes; • Implementation and configuration of SAST/SCA/Secret scanning tools; • Development of security requirements for products and architecture; • Analysis and improvement of CI/CD infrastructure security; • Implementation of artifact signing, SBOM, dependency security practices; • Development of dependency management policy; • Interaction with development teams at all stages of the product lifecycle.

• Experience in Application Security/Product Security from 5 years; • Deep understanding of modern application architecture and typical vulnerabilities; • Understanding of Linux internals, network protocols, and OS principles; • Experience with SAST/SCA/DAST tools; • Understanding of CI/CD and supply chain security; • Experience in threat modeling and security design review; • Experience in analyzing complex systems architecture; • Understanding of secure SDLC principles; • Skills in interacting with development teams.