Description

You will build and maintain automated security testing frameworks to protect software applications throughout the development lifecycle.

Responsibilities

• Perform static code analysis to identify vulnerabilities within software applications.
• Develop and maintain automated security testing scripts and custom tools to enhance framework capabilities.
• Integrate security testing directly into CI/CD pipelines for early issue detection.
• Collaborate with development and DevOps teams to implement secure coding practices and tool integration.
• Automate repetitive security testing tasks to improve operational efficiency.

Required Skills

• 5+ years of experience in security testing and static code analysis.
• Proficiency in Python, Java, or C#.
• Hands-on experience with security tools such as Fortify, Checkmarx, or Veracode.
• Familiarity with CI/CD pipelines and tools like Jenkins, GitLab CI, or CircleCI.
• In-depth understanding of secure coding practices and the Software Development Life Cycle (SDLС).
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.

Preferred Skills

• Experience securing applications in cloud environments including AWS, Azure, or GCP.
• Knowledge of Dynamic Application Security Testing (DAST) methodologies.
• Relevant certifications such as CISSP, CEH, or OSCP.

Key Skills

Education

Bachelor’s degree in Computer Science, Information Security