Description

You will own the security posture across development projects.

Responsibilities

• Onboard projects and development teams onto the Veracode SAST platform.
• Configure application profiles, policies, and automated scans.
• Review scan results, triage findings, and verify false-positive rejections.
• Partner with developers to remediate vulnerabilities and re-run scans.
• Maintain dashboards and compliance reports for AppSec governance.

Required Skills

• 4–8 years in Application Security or Secure Software Development.
• Hands-on experience with Veracode SAST (onboarding, policy scan setup, IDE integration).
• Strong knowledge of OWASP Top 10 and secure-coding principles.
• Ability to validate false positives using code review and regex-based rules.
• Exposure to Java, .NET, Python, or JavaScript applications.
• Experience with CI/CD tools (Jenkins, Azure DevOps, GitHub Actions).
• Strong understanding of application security principles and SDLC best practices.
• Experience resolving vulnerabilities using Java or .NET.

Preferred Skills

• Veracode Certified Engineer (SAST) or Security+ certification.
• Prior development experience using Java, .NET, or equivalent technology stack.

Key Skills

Education

Bachelor's degree