[Hiring] Information Security Specialist @Millennium Group

Role Description

• Review and validate Static Application Security Testing (SAST) findings generated during the software development lifecycle.
• Partner with development teams to investigate vulnerabilities, reduce false positives, and prioritize remediation activities.
• Configure and maintain GitLab security approval workflows, Secure Merge Request controls, approval policies, and enforcement gates.
• Support implementation of AI-assisted triage, remediation recommendations, and automated findings management.
• Build and maintain automation for finding enrichment, correlation, routing, deduplication, and reporting.
• Support onboarding and operationalization of new Application Security tooling and capabilities.
• Drive risk-based prioritization and improve developer adoption of secure coding practices.
• Collaborate with engineering, security, and product teams to optimize Secure SDLC processes and workflows.
• Assist with integration of security platforms and enterprise technology solutions.
• Provide guidance regarding remediation strategies, exception processes, and security best practices.

Qualifications

• 10+ years of Application Security and/or Software Security experience.
• Hands-on experience performing SAST reviews.
• Experience integrating security controls into CI/CD pipelines.
• Strong experience with source code vulnerability remediation.
• Experience with GitLab.
• Experience with Artifactory and/or JFrog platforms.
• Ability to work independently and drive security initiatives with minimal oversight.
• Strong communication skills and the ability to collaborate effectively with development teams and stakeholders.

Requirements

• Experience with Dynamic Application Security Testing (DAST).
• Experience with Software Composition Analysis (SCA).
• Experience with Polaris.
• Experience with OWASP ZAP.
• Familiarity with AI-enabled security automation and remediation workflows.
• Experience with Container Security and Secrets Detection tools.
• Understanding of software supply chain security and modern DevSecOps practices.
• Experience integrating security platforms with GitLab, ServiceNow, Jira, and enterprise reporting solutions.
• Experience leveraging APIs, scripting, and automation to improve security operations.