Description

Lead application security testing efforts through automated and manual vulnerability assessments across software lifecycles.

Responsibilities

• Execute SAST, SCA, and DAST scans using Veracode to identify CWEs and CVEs.
• Perform manual validation and false-positive analysis on all automated scan results.
• Analyze high-rated vulnerabilities and advise application teams on mitigation strategies.
• Conduct scan retests to revalidate fixes for critical and high-severity vulnerabilities.
• Lead a group of testers and collaborate with technical SMEs to refine scan tool configurations.

Required Skills

• 12+ years of overall IT experience with 9+ years focused on application security.
• 7+ years of direct experience in application security testing.
• Deep familiarity with OWASP Top 10 and OWASP Application Security Verification Standards (ASVS).
• Hands-on experience configuring and scanning with Veracode, AppScan, or similar enterprise tools.
• Expertise in SAST, DAST, and SCA scanning practices.
• Ability to interpret and assess CVEs and CWEs within scanning outputs.
• Advanced knowledge of web application development in .NET, Java, PHP, Ruby/Rails, Angular, or Node.js.
• Experience integrating security processes with secret management systems.
• Bachelor's degree required.

Key Skills

Education

Bachelor's Degree