Description

You will own application and open-source security quality assurance, focusing on Software Composition Analysis (SCA) and vulnerability management. You integrate SCA tools into CI/CD pipelines and drive remediation tracking for open-source vulnerabilities.

Responsibilities

• Perform vulnerability triage and license compliance analysis for open-source components.
• Integrate Black Duck or equivalent SCA tools into CI/CD pipelines (GitHub, GitLab, Azure DevOps, Jenkins).
• Track and coordinate remediation efforts for identified security vulnerabilities.
• Validate secure SDLC practices and DevSecOps implementations across cloud platforms.
• Ensure compliance with application security standards through rigorous QA processes.

Required Skills

• 5–8 years of experience in Application Security, Security QA, or Software Security.
• Hands-on expertise with Black Duck or equivalent SCA tools (CodeDx, JFrog Xray, FOSSA).
• Proven experience in OSS vulnerability analysis and license compliance.
• Strong knowledge of CI/CD integration for security tooling.
• Understanding of Secure SDLC and DevSecOps practices.
• Familiarity with cloud platforms (AWS, Azure, GCP).

Key Skills

Education

Not specified