Software Developer- Security Code Review

Software Developer - Security Code Review
Orlando, FL (Onsite Monday-Friday)

Salary:
$100k-$125k base salary (negotiable, depending on experience) + quarterly bonus, full benefits, 401(k) with match, and more


Job Summary:
Our client is seeking a Security-Focused Software Developer to join their onsite team in Orlando, FL. This role is dedicated to reviewing software code for security vulnerabilities and ensuring applications meet secure coding standards. Unlike traditional software development positions, the primary responsibility will be performing manual and automated security code reviews, identifying vulnerabilities, and helping development teams strengthen application security.


Job Responsibilities:

• Perform detailed security-focused code reviews across multiple applications and programming languages.
• Identify vulnerabilities such as injection flaws, cross-site scripting (XSS), insecure deserialization, authentication weaknesses, and insecure APIs.
• Partner with developers to promote secure coding practices and recommend remediation strategies.
• Ensure adherence to security standards, including OWASP Top 10, CWE, and NIST frameworks.
• Collaborate with security, architecture, and DevSecOps teams to improve application security.
• Utilize security analysis tools such as SonarQube, Fortify, Checkmarx, Veracode, or similar platforms.

Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of software development experience.
• At least 2 years of experience in application security, secure code review, or software security.
• Strong understanding of Secure Software Development Lifecycle (SSDLC).
• Experience reviewing and securing code written in languages such as C/C++, C#, Swift, Java, JavaScript, or Python.
• Familiarity with security tools, including SonarQube, Fortify, Checkmarx, Veracode, or similar solutions.
• Strong knowledge of OWASP Top 10, CWE/SANS Top 25, and CVSS scoring.
• OSCP, CSSLP, CEH, GWAPT, or similar security certifications preferred.
• Familiarity with threat modeling, penetration testing, red team, or blue team activities preferred.

About the Company:
Our client is a rapidly growing global cybersecurity leader trusted by organizations around the world to secure servers, endpoints, and critical business systems. Their innovative platform helps businesses prevent unauthorized software execution, reduce cyber risk, and maintain operational security. They offer a collaborative, fast-paced environment where employees have the opportunity to make a significant impact while continuing to grow their careers.