Description

You will conduct web application security assessments, including secure code reviews and dynamic testing. You own the implementation of Fortify Scan Central and support vulnerability remediation strategies with development teams.

Responsibilities

• Execute SAST and DAST scans using Fortify WebInspect, Burp Suite, and Fortify SCA.
• Generate and interpret security reports from static and dynamic scans.
• Analyze Java or OOP codebases to contextualize SAST findings.
• Track identified vulnerabilities and collaborate with developers on remediation plans.
• Implement Fortify Scan Central based on vendor technical documentation.

Required Skills

• 5+ years of experience in web application security assessments.
• Hands-on expertise with Fortify WebInspect, Burp Suite, and Fortify SCA.
• Strong understanding of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Proficiency in Java Enterprise Edition (Java EE / J2EE) or core OOP concepts.
• Experience conducting secure code reviews.
• Ability to work with development teams on vulnerability remediation.
• Bachelor's degree in a relevant field or equivalent experience.

Preferred Skills

• Background in implementing security tools like Fortify Scan Central.
• Familiarity with VeraCode.

Key Skills

Education

Any Gradute