Description

You will own application security across the SDLC, integrating SAST, SCA, and vulnerability management into CI/CD pipelines.

This role is on-site.

Responsibilities

• Integrate SAST (Checkmarx, Fortify, Veracode, CodeQL) and SCA (Snyk, Black Duck, Mend, Sonatype, Dependabot) tools into GitHub, GitLab, Azure DevOps, and Jenkins pipelines.
• Manage vulnerability remediation and generate SBOMs for all Java, Python, C/C++, and JavaScript codebases.
• Enforce OWASP Top 10 standards and secure coding practices across development teams.
• Collaborate with engineering to resolve security findings and maintain DevSecOps workflows.

Required Skills

• 4+ years of experience in application security or DevSecOps.
• Hands-on experience with SAST tools: Checkmarx, Fortify, Veracode, or CodeQL.
• Proficiency in SCA tools: Snyk, Black Duck, Mend, Sonatype, or Dependabot.
• Strong knowledge of OWASP Top 10 and secure coding principles.
• Experience managing CI/CD pipelines using GitHub, GitLab, Azure DevOps, or Jenkins.
• Proficiency in at least one of the following: Java, Python, C/C++, or JavaScript.

Preferred Skills

• Bachelor's degree in Computer Science or related field.
• Experience with vulnerability management and SBOM generation.

Key Skills

Education

Bachelor's degree