Software Mind

[8PP] Senior Security Analyst- Application Security & DevSecOps

Rol remoto de Application Security con fit claro de ubicación del candidato.

Publicado3 jul 2026

Países elegibles2 países aceptados

Señal de senioritySenior

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

Costa RicaEstados Unidos

Puedo aplicar realmente?Revisa la lista de países

Las ubicaciones aceptadas para candidatos están listadas (2).

Actualidad de la fuente3 jul 2026

Fit de ubicación2 países aceptados

Match de stackAWS, Azure

Camino de aplicaciónSitio de la empresa

Resumen de fit de MiraPor qué vale revisar este rol

Fit de ubicación2 países aceptadosAgrega tu país

Match de stackAgrega skills al perfil para compararAWS, Azure

Señal de senioritySeniorDefine tu nivel para una revisión más precisa.

Preparación para aplicarSitio de la empresaLa aplicación continúa en el sitio de la empresa.

Aplicación

Aplicar en el sitio de la empresa

Aplicación externa

Aplicando a[8PP] Senior Security Analyst- Application Security & DevSecOpsSoftware Mind

Fit de país2 países aceptados

Camino de aplicaciónSitio de la empresa

WithMiraGuarda o suscríbete antes de salir

Aplicación de la empresa

WithMira mantiene este rol para descubrimiento. La aplicación continúa en el sitio de la empresa.

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

Partner with development teams to embed secure coding practices throughout the SDLC, shifting security from a final gate to a shared, integrated responsibility
Assess current development practices against Secure SDLC standards, identify gaps, and drive a phased maturity roadmap with measurable milestones
Lead developer enablement initiatives — secure coding guidance, threat modeling, and a security champions program — that build durable capability within engineering teams
Integrate and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines (Azure DevOps, Bitbucket) to deliver fast, in-workflow feedback with minimal friction

Evaluate prospective products, platforms, SaaS tools, and developer tooling to confirm alignment with security best practices before adoption
Conduct architecture and design reviews, assessing authentication, authorization, data handling, encryption, logging, and multi-tenancy considerations
Review third-party and supply chain risk — dependencies, integrations, AI/ML components, and vendor security posture — and define conditions for safe use
Produce clear, risk-based assessments and recommendations (approve, approve-with-conditions, or reject) for engineering and security leadership
Partner with vendor risk and compliance functions to align product reviews with SOC 2 and broader control requirements

Implement policy-as-code guardrails and infrastructure-as-code security controls across Azure/M365 cloud environments
Drive cloud posture improvements — configuration hardening, CIS benchmark alignment, WAF, and network segmentation
Establish supply chain security controls including dependency governance and code signing

5+ years of experience in Application Security, DevSecOps, or a similar role
Demonstrated experience maturing an engineering organization through Secure SDLC adoption — not just deploying tools
Hands-on AppSec and DevSecOps background: SAST/DAST/SCA, CI/CD pipeline security, secrets management
Strong product and technology security review experience — ability to assess a new platform or tool and articulate concrete risks and mitigations
Experience with CI/CD and source control tooling (Azure DevOps, Bitbucket, or equivalents)
Familiarity with secure development frameworks (NIST SSDF, OWASP SAMM/ASVS, BSIMM)
Cloud security experience in AWS and/or Azure
Strong collaboration and communication skills — able to coach developers and present risk to both technical and executive audiences
+90% English proficiency (written and spoken, minimum B2 level)