Senior Lead Security SME

About the role

The Senior Lead Security SME will strengthen the security posture of enterprise applications by driving Secure SDLC practices, vulnerability management, and security automation across the organization. This role partners closely with product, platform, and information security teams to embed security throughout the software development lifecycle.

Key responsibilities

• Perform application security assessments, secure code reviews, and vulnerability analysis for multiple products and services.
• Identify and support remediation of critical vulnerabilities such as SQL Injection, XSS, OWASP Top 10 risks, and potential PII/data exposure.
• Drive Secure SDLC adoption by collaborating with development teams to integrate security controls early in the lifecycle.
• Act as liaison between Product Engineering, Platform Engineering, and Information Security to manage risk and ensure secure solution delivery.
• Prioritize remediation efforts with engineering leads and architects, promoting secure coding best practices.
• Contribute to security automation, platform security initiatives, and continuous improvement of security processes.
• Leverage expertise in Java, AWS, microservices, and cloud‑native architectures to deliver scalable, developer‑friendly security solutions.
• Utilize AI‑assisted tools such as Cursor, Claude, and GitHub Copilot to accelerate security analysis and code review.

Required profile

• 6‑10 years of experience in application security or related fields.
• Strong understanding of Secure SDLC, vulnerability management, and OWASP Top 10.
• Proven ability to work cross‑functionally with engineering and security teams.
• Excellent analytical and problem‑solving skills.

Required skills

• Java
• AWS
• Microservices
• Cloud‑native architectures
• GitHub Copilot
• Claude
• Cursor