Description

Own security scanning and vulnerability management within the development lifecycle.

Responsibilities

• Conduct source code scans and triage findings based on OWASP Top 10 vulnerabilities.
• Manage and configure Jenkins servers, integrating security plugins into CI/CD architectures.
• Scan Infrastructure as Code (IaC) to identify and mitigate security risks.
• Provide technical solutions to remediate application vulnerabilities across the stack.
• Manage security tool integrations across various SCM systems and build pipelines.

Required Skills

• 10+ years of experience in information security or related roles.
• Deep expertise in Static Application Security Testing (SAST).
• Hands-on experience with Checkmarx or Fortify.
• Proficiency in Java and JavaScript development.
• Strong command of UNIX, Linux, and shell scripting.
• Experience with Jenkins and Groovy scripting.
• Working knowledge of Bitbucket, GitLab, Azure DevOps, or TeamForge.
• Ability to write SQL queries for Oracle, IBM DB2, or SQLServer.
• Experience with Maven and Gradle package managers.
• Hands-on experience with Docker.
• Knowledge of AWS components including EC2, S3, RDS, ELB, Lambda, CloudFormation, auto-scaling, ElastiCache, and VPC.

Preferred Skills

• Experience with SCA and DAST tools.

Key Skills

Education

Any Graduate