- secure code review; vulnerability identification and triage; exploitability reasoning; common classes such as injection, auth/authz, SSRF, insecure deserialization, secrets and misconfiguration; evidence-backed verdicts.
- GCP IAM, service accounts, networking, storage, workload identity, audit logging, cloud misconfigurations and least privilege; ability to judge cloud-specific exposure.
- Calibration, rubric writing, reviewer alignment, adjudication tracking, benchmark versioning and structured quality reporting. Could be covered by one of the two engineers with client oversight.
- Bachelors with 4+ years exp
Job description provided by Zensar.
View the original posting
