高级SSDLC安全顾问（三个月合同）
Senior SSDLC Security Consultant (3-Month Contract)
Category: IT Services
Location:
Position Overview
MBC Technology Group (MBCTG) is seeking a motivated and detail-orientedGRC Analystto support a private-sector client engaged in modernfull-stack application development on Microsoft Azure.
This role focuses on integratingsecurity governance, risk management, and compliance practices into the software development lifecycleto ensure applications are designed, built, and deployed securely.
The GRC Analyst will work closely withsoftware engineers, DevOps teams, and security architectsto ensure that development practices align withsecure coding standards, cloud security requirements, and industry frameworks.
Key Responsibilities
- Support the development and implementation ofSecure Software Development Lifecycle (SSDLC) practicesacross full-stack development projects.
- Collaborate withsoftware engineers, DevOps teams, and architectsto embed security and compliance requirements into development workflows.
- Assist in implementingsecurity controls aligned with frameworks such as NIST SSDF, NIST CSF, and OWASP best practices.
- Participate insecure design reviews, architecture discussions, and threat modeling sessionsfor applications hosted onMicrosoft Azure.
- Assist with documenting and maintainingsecure coding standards and application security policies.
- Identify and tracksecurity risks related to application development, cloud infrastructure, and third-party components.
- Maintainrisk registers, control mappings, and compliance documentationfor SSDLC processes.
- Support vulnerability management by helping track remediation activities for issues discovered duringcode scanning, penetration testing, or security reviews.
- Assist with the implementation and monitoring ofAzure security services and controls, includingAzure Defender, Azure Policy, and identity management controls.
- Prepare documentation and evidence forsecurity assessments, internal audits, and client compliance reviews.
- Track and reportsecurity metrics for development teams, including vulnerability remediation timelines and SSDLC maturity.
Requirements
Experience:
- SDLC: 2 years (Required)
- DevOps: 2 years (Preferred)
- NIST standards: 2 years (Preferred)
- ISO 27001: 2 years (Preferred)
Minimum Qualifications
- 2+ years of experience in cybersecurity, GRC, or application security.
- Understanding ofSecure Software Development Lifecycle (SSDLC)andDevSecOps practices.
- Familiarity withapplication security principles, including common vulnerabilities (OWASP Top 10).
- Basic understanding ofcloud security concepts, preferably inMicrosoft Azure environments.
- Strong documentation, communication, and cross-team collaboration skills.
Preferred Qualifications
- Bachelor’s degree inInformation Security, Computer Science, Software Engineering, or a related field.
- Experience working withsoftware development teams or CI/CD pipelines.
- Familiarity withAzure DevOps, GitHub, or other CI/CD platforms.
- Knowledge ofsecurity testing toolssuch as Snyk, Checkmarx, Veracode, or SonarQube.
- Understanding ofthreat modeling methodologies(e.g., STRIDE).
- Security certifications such asSecurity+, AZ-500, CSSLP, or working toward CISSP or CISA.
Location requirement: Candidates must be currently based in the US or Canada and authorized to work as a contractor in that region.
Benefits
- Work with amodern full-stack development environment hosted on Microsoft Azure.
- Collaborate with experienceddevelopers, architects, and cybersecurity professionals.
- Gain hands-on experience implementingsecure development practices in enterprise cloud environments.
- Exposure to clients acrosshealthcare, finance, government, and education sectors.
- Opportunities forprofessional growth and cybersecurity certification support.
DetailsOriginally posted on Himalayas