Jobs at SonSoft Inc.

Perform web and network penetration testing and secure code analysis using tools such as HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), analyze security NFRs/metrics, coordinate multiple projects, manage stakeholders, and support global delivery. Mobile security and telco domain experience are a plus.

Perform web and network penetration testing and secure code analysis using tools like HP Fortify, WebInspect, Nessus, Burp, and IBM AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), collaborate with stakeholders, coordinate projects, and work within global delivery teams. Mobile security and telco domain knowledge are a plus; relevant security certifications encouraged.

Lead application security activities including static and dynamic code analysis, penetration testing, and use of tools like Fortify, AppScan, CodeSecure, BurpSuite, Paros, and TemperIE. Perform development/configuration, solution validation and deployment, manage projects and talent, and work in a consulting environment requiring regular travel.

Lead application security consulting: define business processes, design secure architectures, perform source-code analysis and penetration testing, use Fortify/AppScan/CodeSecure and proxy tools (BurpSuite/Paros/TemperIE). Configure, validate, deploy solutions, manage projects and talent, and support client engagements requiring regular travel.

Lead vulnerability assessment and infrastructure security activities, manage AirWatch MDM and Symantec tools, develop/configure and validate security solutions, perform business process consulting, manage projects and talent, and travel regularly for management consulting engagements.

Lead infrastructure vulnerability assessment and security management activities, manage Air-Watch MDM and Symantec solutions, perform development/configuration/validation/deployment, provide business process consulting, and manage projects and talent in a consulting environment that requires regular travel.

Lead application security and business process consulting efforts: design and detail secure architectures, perform source-code analysis and penetration testing, use SAST/DAST tools (Fortify, AppScan, CodeSecure, BurpSuite, Paros, TemperIE), support development/configuration/validation/deployment, manage projects and talent, and travel regularly for consulting engagements.

Lead application security activities including static and dynamic analysis, source code review, and penetration testing using Fortify, AppScan, CodeSecure, BurpSuite and related tools. Provide security architecture and process design, manage projects and talent, perform solution validation and deployment, and support consulting engagements that require regular travel.

Perform web and network penetration testing and secure code analysis using tools like Fortify, WebInspect, Nessus, Burp and AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), coordinate projects and stakeholders, understand security NFRs/metrics, and work in a global delivery environment. Mobile and telco domain experience is a plus.

Provide application security consulting and architecture for software projects, perform source-code analysis and penetration testing using Fortify, AppScan, CodeSecure and interception tools (BurpSuite, Paros, TemperIE). Lead development/configuration, validation and deployment, manage projects and talent, and travel for client consulting engagements.

Lead application security assessments and consulting: perform source-code analysis, penetration testing, tool-based scans (Fortify, AppScan, CodeSecure), configure/deploy solutions, manage projects and teams, and support client engagements with regular travel.

Lead vulnerability assessment and infrastructure security efforts, design and detail business processes, configure and deploy security solutions (AirWatch MDM, Symantec), manage projects and talent, and provide consulting with regular travel.

Lead AEM/Adobe CQ architecture and implementation for enterprise clients. Drive solution design, mentor staff, produce thought leadership, and execute projects in a management consulting environment requiring regular travel.

Develop and maintain Java/JEE microservice-based applications using Spring/Spring Boot and REST APIs. Work across the SDLC including architecture, design, testing (automated unit tests), CI, Docker, SQL, build/release, and maintenance in a global delivery environment.

Design, develop, and support iOS mobile applications. Translate functional and non-functional requirements to system requirements. Participate in SDLC, production support, and performance engineering. Collaborate with team members and interface with clients; apply analytical and technical skills to deliver solutions.

Design, develop, and support user interface applications using HTML5, CSS3, JavaScript and JS MVC frameworks. Translate requirements to system specs, participate in SDLC, and provide production support and performance engineering. Collaborate with teams and interface with clients in a global delivery environment.

Design, build and maintain MicroStrategy visualizations and BI solutions: gather requirements, model data, write SQL for data mining, translate needs to ETL developers, deploy dashboards, and support ongoing enhancements.

Design, develop, and deploy MicroStrategy reports, dashboards and metadata. Translate business needs into visualizations, write SQL for data mining, collaborate with stakeholders, perform full lifecycle BI development, and support integration (Hadoop/ETL).

Lead architecture and delivery of enterprise Adobe AEM/CQ solutions. Provide hands-on AEM development (3-4 years), solution and enterprise architecture, project execution, thought leadership, mentoring, and consulting in a travel-heavy management consulting environment.

Develop and maintain native iOS applications using Swift and Xcode, ensure performance management and follow SDLC practices, collaborate with global teams, and contribute to cross-functional development efforts.