Requirements

A strong foundation in application security concepts (including the OWASP Top 10), web applications, APIs, and modern secure development practices.
Proficiency in scripting or programming (such as Python) to build automation, coupled with hands-on expertise in navigating CI/CD pipelines and Git-based workflows.
Demonstrated problem-solving capabilities to tackle moderately complex technical challenges independently, alongside a drive to continuously learn and optimize DevSecOps tooling.
Exceptional communication and collaboration skills to effectively partner with diverse engineering teams, integrate feedback, and champion secure design principles in a fast-paced environment.

What You'll Be Doing

Implement and integrate critical application security controls (such as SAST, DAST, SCA, and secrets scanning) within CI/CD pipelines and Git-based workflows to proactively secure Everpure's software supply chain.
Develop and maintain scalable automation scripts to streamline complex security checks, significantly improving tooling efficiency and driving consistent security adoption across engineering platforms.
Exercise independent judgment in analyzing moderately difficult security issues, guiding development teams to effectively identify, troubleshoot, and remediate vulnerabilities in modern application environments.
Drive the standardization of secure coding best practices and track key AppSec metrics to actively elevate the overall maturity of our global secure development operations.

Innovation: We celebrate those who think critically, like a challenge, and aspire to be trailblazers.
Growth: We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®!
Team: We build each other up and set aside ego for the greater good.