Description

You will own the security validation and tooling integration for application development lifecycles.

Responsibilities

• Onboard projects and development teams onto the Veracode SAST platform.
• Configure application profiles, policies, and automated scans.
• Review scan results, triage findings, and verify false-positive rejections.
• Partner with developers to remediate vulnerabilities and re-run scans.
• Maintain dashboards and compliance reports for AppSec governance.

Required Skills

• 4–8 years in Application Security or Secure Software Development.
• Hands-on experience with Veracode SAST (onboarding, policy scan setup, IDE integration).
• Strong knowledge of OWASP Top 10 and secure-coding principles.
• Ability to validate false positives using code review and regex-based rules.
• Experience with applications built using Java, .NET, Python, JavaScript, React.js, or Next.js.
• Experience with CI/CD tools (Jenkins, Azure DevOps, GitHub Actions).
• Strong understanding of application security principles and SDLC best practices.
• Experience in resolving vulnerabilities using at least one programming language such as Java or .NET.

Preferred Skills

• Veracode Certified Engineer (SAST) or Security+ certification.
• Experience collaborating with the Tenable platform team.

Key Skills

Education

Any Gradute