Description

You will lead the Static Application Security Testing (SAST) practice by enabling scanning tools, preset analysis, and customization processes.

Responsibilities

• Lead the SAST practice by configuring scanning tools and managing preset analysis.
• Contribute to security coding guidelines across different programming languages.
• On-board, maintain, and support SAST tools within the Enterprise Application Security Program.
• Collaborate with Application Security Champions, Architects, and development teams on governance and enablement.
• Coach junior team members to ensure delivery meets program requirements.

Required Skills

• 10+ years of overall IT experience.
• 8+ years of application security experience.
• 3+ years of SAST experience including configuring scans, vulnerability analysis, and preset customization (Checkmarx or similar).
• 3+ years of experience in Security Requirements, Application Threat Modeling, Static Analysis, or Application Security Risk Assessments.
• Deep knowledge of OWASP Top 10 and CWE/SANS Top 25.
• Practical understanding of secure SDLC methodologies.
• Proven experience identifying and suggesting mitigations for vulnerabilities to development teams.
• Industry certifications such as CSSLP or CEH.

Preferred Skills

• Bachelor’s degree or higher in information technology.
• Experience drafting application security coding standards.
• Experience with application security in banking or financial services.

Key Skills

Education

Any Graduate