Description

You will lead application security testing efforts across the software development lifecycle.

Responsibilities

• Execute automated and manual vulnerability assessments, including SAST, SCA, and DAST scans using tools like Veracode.
• Identify and analyze CWEs and CVEs, conducting manual validation and false-positive analysis on scan results.
• Provide remediation support and technical strategies to application teams for identified risks.
• Execute retest scans to validate the resolution of critical and high-severity vulnerabilities.
• Lead a group of testers and collaborate with technical SMEs to refine scan tool configurations.

Required Skills

• 12+ years of IT experience with 9+ years specifically in application security.
• 7+ years of dedicated application security testing experience.
• Deep familiarity with OWASP Top 10 and OWASP Application Security Verification Standards (ASVS).
• Expertise in SAST, DAST, and SCA scanning practices.
• Experience configuring and scanning with Veracode, AppScan, or similar enterprise tools.
• Ability to interpret and assess CVEs and CWEs.
• Advanced knowledge of web development in at least one stack: .NET, Java, PHP, Ruby/Rails, Angular, or Node.js.
• Experience working and integrating with secret management systems.
• Bachelor's degree required.

Preferred Skills

• CSSLP or CISSP certification.

Key Skills

Education

Bachelor's Degree