Python Developer – Application Security

Key Responsibilities • Design, develop, and maintain secure applications using Python. • Implement secure coding practices to prevent common application vulnerabilities. • Identify, analyze, and remediate security vulnerabilities in Python-based applications. • Perform application security assessments, code reviews, and security testing. • Integrate security checks into CI/CD pipelines and development workflows. • Develop Python scripts and automation tools for security testing, vulnerability analysis, and reporting. • Identify and address vulnerabilities related to OWASP Top 10, including SQL injection, cross-site scripting (XSS), broken access control, and security misconfiguration. • Implement secure authentication, authorization, session management, and access controls. • Work with security teams to perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). • Assess third-party libraries and dependencies for known security vulnerabilities. • Implement secure API development practices, including input validation, rate limiting, and proper error handling. • Support vulnerability remediation, security audits, and compliance requirements. • Collaborate with developers, DevOps engineers, QA teams, and security professionals to improve application security. Required Technical Skills • Strong proficiency in Python programming and scripting. • Experience with Python frameworks such as Django, Flask, or FastAPI. • Good understanding of application security principles and secure software development practices. • Knowledge of OWASP Top 10 vulnerabilities and mitigation techniques. • Experience with REST API security and secure web application development. • Understanding of authentication protocols such as OAuth 2.0, OpenID Connect, and JWT. • Knowledge of SQL injection, XSS, CSRF, SSRF, insecure deserialization, and broken access control. • Experience with application security testing and vulnerability remediation. • Familiarity with Git, Linux, and CI/CD pipelines. • Knowledge of encryption, hashing, secrets management, and secure configuration. • Understanding of HTTP/HTTPS, TLS, cookies, sessions, and web application architecture. Preferred Skills • Experience with security tools such as SonarQube, Bandit, Semgrep, Snyk, Burp Suite, or OWASP ZAP. • Familiarity with SAST, DAST, and SCA tools. • Experience automating security testing using Python. • Knowledge of Docker, Kubernetes, and cloud security fundamentals. • Familiarity with AWS, Azure, or GCP security services. • Understanding of threat modeling and security risk assessment. • Knowledge of DevSecOps practices and security integration into CI/CD pipelines. • Familiarity with compliance standards such as ISO 27001, SOC 2, or PCI DSS.