Description

You will conduct web application security assessments, own Fortify Scan Central implementation, and drive vulnerability remediation with development teams.

This role is on-site.

Responsibilities

• Execute SAST and DAST scans using Fortify WebInspect, Burp Suite, and Fortify SCA.
• Analyze Java or OOP codebases to contextualize static analysis findings.
• Implement Fortify Scan Central based on vendor technical documentation.
• Track vulnerabilities and collaborate with developers on remediation plans.
• Generate and interpret security reports from static and dynamic scans.

Required Skills

• 5+ years of experience in web application security assessments.
• Hands-on expertise with Fortify WebInspect, Burp Suite, and Fortify SCA.
• Strong understanding of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Proficiency in Java Enterprise Edition (Java EE / J2EE) or core OOP concepts.
• Experience conducting secure code reviews.
• Bachelor's degree in a relevant field or equivalent experience.
• Ability to work with development teams on vulnerability remediation.

Preferred Skills

• Background in implementing security tools like Fortify Scan Central.
• Familiarity with VeraCode.

Key Skills

Education

Any Gradute