Spigot Software - Senior Security Auditor

Description :

We are looking for an experienced Developer Security Auditor responsible for conducting in-depth secure code reviews, identifying security weaknesses, and working closely with engineering and business teams to ensure timely remediation. The role requires strong technical expertise across modern development stacks and excellent communication skills to translate technical risks into clear business impact.

Responsibilities :

- Perform secure code reviews across multiple languages and platforms to identify security vulnerabilities.

- Conduct information security audits on application codebases and development practices.

- Assess and validate mitigating controls implemented by developers.

- Clearly explain critical and high-risk findings to business stakeholders and development teams.

- Collaborate with developers to ensure vulnerabilities are fixed within agreed timelines.

- Contribute to security best practices, coding standards, and secure development lifecycle improvements.

- Partner with cross-functional teams to enhance overall application security posture.

Requirements :

- 8-12 years of industry experience in software development, application security, or secure code review.

- Prior experience with GRC, InfoSec processes, performing security audits on codebases, and evaluating developer-implemented controls.

- Ability to translate technical issues into business language for non-technical stakeholders.

Mandatory Technical Skills:

- Strong hands-on expertise in Python and Go (advanced level).

- Working knowledge of C#.

- Experience with AWS and Azure environments.

- Proficient in Kubernetes, Terraform, and GitHub Actions.

- Understanding of Cortex and related security tooling.

- Solid understanding of secure coding principles, OWASP Top 10 SAST/DAST tools, and cloud-native security.

Soft Skills :

- Excellent communication and presentation skills.

- Strong stakeholder management and ability to influence remediation decisions.

- Proactive, detail-oriented, and able to work independently in a fast-paced environment.