ZipRecruiter

Log In

1

Secure Code Review Jobs in New York (NOW HIRING)

Merge

Security Engineer

Manhattan, NY · On-site

OWASP, common vulnerability classes, secure API design, auth and authorization patterns • Experience conducting threat modeling and secure code reviews • Hands-on experience with application ...

Coinme

Claude Code Platform Lead

Jersey City, NJ

$61.50 - $80.75/hr

... secure digital wallet, and DeFi integrations. Beyond our consumer offerings, we're also the ... Strong understanding of Git workflows, code review processes, and merge request automation

Cohere

Senior Software Engineer, Security Agents

Manhattan, NY · On-site

$126K - $172K/yr

Responsibilities : • Build autonomous security agents that perform alert triage, secure code reviews, threat modeling, and vulnerability assessment • Develop agent orchestration systems that help ...

next page

Showing results 1-20

All JobsSecure Code Review JobsSecure Code Review Jobs in New York

Secure Code Review information

What is secure code review?

Secure code review is the process of systematically examining application source code to identify and remediate security vulnerabilities before software is released. This review can be performed manually or with automated tools, focusing on areas where coding errors could lead to security risks such as injection attacks, data leaks, or authentication flaws. The goal is to ensure that the code adheres to secure coding standards and best practices, ultimately reducing the risk of exploitation by malicious actors.

What are the key skills and qualifications needed to thrive as a Secure Code Reviewer, and why are they important?

To thrive as a Secure Code Reviewer, you need a solid understanding of secure coding practices, programming languages (such as Java, Python, or C++), and common software vulnerabilities, often supported by relevant security certifications like CISSP or CSSLP. Familiarity with automated code analysis tools, static application security testing (SAST) platforms, and bug tracking systems is typically required. Strong analytical thinking, attention to detail, and clear communication skills set outstanding reviewers apart. These abilities are crucial for identifying, explaining, and mitigating security risks in code, ensuring robust application security.

What are some common challenges faced by professionals performing secure code reviews, and how can they be addressed?

Secure code reviewers often encounter challenges such as keeping up with evolving security threats, identifying subtle vulnerabilities in complex codebases, and maintaining effective communication with development teams. To address these, reviewers should stay updated on the latest security trends, use automated tools to assist in identifying potential issues, and foster collaborative relationships with developers to ensure that findings are understood and remediated effectively. Regular training, participating in security communities, and integrating secure code review into the software development lifecycle can also help overcome these challenges.

What is the difference between Secure Code Review vs Static Application Security Testing (SAST)?

AspectSecure Code ReviewStatic Application Security Testing (SAST)
CredentialsKnowledge of secure coding, programming languages, security standardsSecurity testing tools, programming knowledge, security certifications
Work EnvironmentManual review, developer collaboration, code analysisAutomated scanning, integration with CI/CD pipelines
Industry UsageDevelopment teams, security analysts, code auditsSecurity teams, QA, DevOps, automated security testing

Secure Code Review involves manual or semi-automated analysis of source code to identify security flaws, emphasizing developer collaboration. SAST uses automated tools to scan code for vulnerabilities during development, enabling faster detection. Both roles aim to improve code security but differ in approach: one is manual and detailed, the other automated and scalable.

What are popular job titles related to Secure Code Review jobs in New York? For Secure Code Review jobs in New York, the most frequently searched job titles are:
What job categories do people searching Secure Code Review jobs in New York look for? The top searched job categories for Secure Code Review jobs in New York are:
Secure Code Review jobs near you

Application Security Consultant

High Bridge Consulting

Parsippany Troy Hills, NJ • On-site

Other

Posted 5 days ago

Job description

Must Have Responsibilities
  • Lead application security design across web, mobile, and AWS cloud-native systems, including secure architecture reviews and CI/CD security integration.
  • Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk), triage vulnerabilities, and guide remediation aligned to OWASP Top Ten.
  • Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3) and support runtime and application-layer protections.
  • Partner with release and change management to ensure secure, stable production deployments and support go-live readiness.
  • Provide security input in architecture and project planning, ensuring requirements are embedded early in design and development.
  • Track vulnerabilities, produce reporting, and manage remediation progress across engineering teams.
Must Have Qualifications
  • 3+ years in application security (offense and defense) with hands-on SAST/SCA experience.
  • Strong knowledge of OWASP Top Ten and web/API security vulnerabilities and remediation.
  • Experience securing AWS cloud services and working with cloud security platforms (e.g., Wiz, Prisma Cloud, Orca).
  • Ability to read and review code in Java, JavaScript/Node.js, or Python for security validation.
  • Experience with CI/CD pipelines, DevSecOps practices, and secure SDLC integration.
  • Strong communication skills with ability to influence technical and business stakeholders.
  • Experience working with change/release management in production environments.
Nice to Have Responsibilities
  • Automate security testing and improve security tooling workflows.
  • Develop and improve security runbooks, documentation, and operational procedures.
  • Support penetration testing, secure code reviews, or developer training as needed.
  • Participate in additional architecture discussions or advisory meetings when required.
Nice to Have Qualifications
  • Familiarity with threat intelligence and how it informs application security controls.
  • Experience driving developer security adoption through workshops or working sessions.
  • Strong understanding of agile delivery environments and enterprise release governance.

Apply