> Markdown version of [/jobs/ext/3224517-it-security-auditor](https://www.wearedevelopers.com/jobs/ext/3224517-it-security-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Auditor

- **Company:** Shree Narayani Networking Solutions Llc
- **Location:** United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cloud Computing, Cross-Site Request Forgery, Node.Js, Open Source Technology, Open Web Application Security, Fortify (Software), Secure Coding, Web Application Security, Software Engineering, Software Systems, Google Cloud, ReactJS, Spring-boot, Software Security, Cross-Site Scripting (XSS), Containerization, AngularJS, Information Technology, Synopsys Black Duck, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Programming Languages, Dynamic Application Security Testing
- **Published:** September 11, 2026
- **Apply:** https://www.dice.com/job-detail/de59d387-27e8-416e-b4e5-26c60c432be5

## About the Role

Minimum qualifications: 5+ years IT experience, 3+ years in secure coding and application security, and experience with both compiled and interpreted languages.

## Description

Serve as a Senior Full Stack Application Development Security Auditor focused on secure platform and application design.

 - Conduct Dynamic, Static, and Software Composition Analysis (DAST, SAST, SCA) assessments on software systems.
 - Collaborate with software development teams to promote and implement secure coding practices.
 - Guide and lead efforts to automate secure configuration, verification, compliance, and authorization of systems using orchestration and automation tools.
 - Advise on and implement security patterns and practices for continuous compliance and risk mitigation.
 - Work with distributed teams to transform and enhance secure software development lifecycle processes.
 - Utilize application security tools such as Coverity, BlackDuck, SRM, Fortify, and others.
 - Analyze and explain security vulnerabilities including those listed in the OWASP Top 10 (e.g., XSS, injection, CSRF, SSRF).
 - Assess and secure web, API, and cloud (Azure, AWS, Google Cloud Platform) based applications, including containerized environments.
 - Apply federal, industry, and open-source security standards and guidelines (OWASP, SANS, CERT, etc.).
 - Work with multiple programming languages and frameworks such as Angular, React, Node.js, Java, Spring Boot, .NET, and related stacks.
 - Ensure compliance through secure application development, networking, infrastructure, and security automation (DevSecOps).
 - Participate in hybrid work environment-on-site two days a week (Wednesdays and Thursdays required).
 - Local candidates only; must be able to attend in-person interviews and pass a CJIS background check.