Description

You will manage end-to-end application security scanning and remediation within a modern development lifecycle.

Responsibilities

• Conduct end-to-end SAST and SCA analysis using commercial application scanning tools.
• Develop new security tool queries and customize existing ones to identify non-standard vulnerabilities.
• Onboard applications and triage findings to facilitate remediation with development teams.
• Verify proposed security findings and ensure effective resolution.
• Integrate security scanning processes into automated CI/CD pipelines.

Required Skills

• 5+ years of experience with SAST and SCA security tools, specifically Checkmarx, CheckmarxOne, and Nexus IQ.
• 5+ years of experience customizing security tool queries to detect new vulnerabilities.
• 5+ years of experience in application onboarding, triaging, and remediation.
• 3+ years of recent, hands-on development experience working with RESTful APIs.
• Deep understanding of CI/CD and modern, automated development environments.
• Experience working within the SDLC and using Jira.
• Proficiency with Nexus and API development.
• Bachelor's degree.

Key Skills

Education

Bachelor's degree