Source description
About the role
Vulnerability Assessment & Remediation
Review and triage vulnerabilities from multiple sources including customer-reported issues, security researchers, automated scanning tools, and penetration testing results
Assess severity and potential impact, including CVEs and third-party component risks
Partner with developers to explain findings in clear terms, identify root causes, and drive timely remediation
Track and validate fixes
Developer Collaboration
Work closely with engineering teams to integrate security into daily workflows
Support developers in understanding secure coding practices and common vulnerability patterns
Participate in security reviews and provide actionable feedback
Threat Modeling & Security Reviews
Assist in threat modeling to identify potential risks early in the design phase
Support architecture and design reviews with a security perspective
Help ensure security is considered as part of feature development
Security in the SDLC/AIDLC
Contribute to integrating security into the SDLC and evolving AI-driven development processes (often referred to as AIDLC)
Help implement and improve secure development practices in CI/CD pipelines
Support adoption of security tools and ensure findings are actionable
AI-Assisted Security & Development
Use AI tools to improve vulnerability triage and analysis, accelerate security reviews and documentation, and identify patterns to reduce manual effort
Collaborate with engineering teams that are adopting AI-assisted development workflows
Continuously explore ways to use AI to improve security processes and efficiency
More at Perforce