• Source Code Security Scanning:Use industry-standard SAST (Static Application Security Testing) tools to scan application source code and identify potential vulnerabilities before they reach production.

• Security Incident Monitoring and Analysis:Monitor security dashboards and logs for anomalous activity, analyze potential incidents, and escalate issues to senior engineers with proper documentation.

• Vulnerability Assessment and Tracking:Perform routine vulnerability scans on web applications and internal systems, track identified weaknesses across their lifecycle, and follow up on remediation progress.

• Website Vulnerability Scanning:Conduct scheduled security scans of ShopBack’s web properties using approved tools, document findings, and contribute to triage and risk-rating exercises.

• Security Documentation:Create and revise technical documents such as security runbooks, process guides, and incident reports to keep internal knowledge bases accurate and up to date.

• Automation Scripting:Write scripts to automate repetitive security tasks such as log parsing, report generation, or data aggregation, improving the efficiency of the security operations workflow.

• Cross-Team Collaboration:Work closely with developers, product managers, and DevOps engineers to share security findings and support the adoption of secure coding practices across the engineering organization.