Software Developer - Security Review

Salary: $88,000 - 128,000 per year Requirements: We require a bachelors degree in Computer Science, Cybersecurity, or a related discipline, or equivalent professional experience.We look for 5+ years of software development experience, including at least 2 years focused on secure code review or application security.We need a strong grasp of the secure software development lifecycle (SSDLC).We expect experience identifying and fixing vulnerabilities in code written in one or more languages such as C/C++, C#, Swift, Java, JavaScript, or Python.We value familiarity with security platforms such as SonarQube, Fortify, Checkmarx, Veracode, or comparable tools.We require knowledge of OWASP Top 10, CWE/SANS 25, and CVSS scoring.We are looking for strong analytical, communication, and documentation capabilities.Preferred: security certifications such as OSCP, CSSLP, CEH, or GWAPT.Preferred: experience in regulated industries such as finance, healthcare, or defense.Preferred: familiarity with threat modeling, penetration testing, or red/blue team activities. Responsibilities: We perform detailed, security-oriented code reviews across multiple codebases and programming languages.We identify both common and advanced vulnerabilities, including injection flaws, XSS, insecure deserialization, and insecure APIs.We collaborate with developers to coach them on secure coding practices.We recommend remediation steps and mitigation strategies aligned with security standards such as OWASP Top 10, CWE, and NIST.We partner with security engineers, architects, and DevSecOps teams to strengthen the security posture of our code.We document findings and monitor remediation progress.We use static and dynamic analysis tools to complement manual review work.We take part in security audits, threat modeling, and secure code training sessions. Technologies: C#DevSecOpsJavaJavaScriptNetworkOWASPPythonSecuritySwift More: We are ThreatLocker, a leader in endpoint protection technologies delivering enterprise cybersecurity solutions that help secure servers and endpoints. Our platform includes Application Allowlisting, Ringfencing™, Storage Control, Elevation Control, Endpoint Network Control, Configuration Management, and Operational Alert capabilities, all aimed at blocking exploits that target application vulnerabilities. This is an in-office role based in Orlando, Florida, and we offer benefits including 401(k), 401(k) matching, dental, health, life, and vision insurance, paid time off, parental leave, an employee assistance program, and a referral program. Employment is contingent on passing a background check and drug/substance screening, and we also conduct randomized drug and substance testing approximately every 60 days. last updated 26 week of 2026