Description

You will own the Threat and Vulnerability Management (TVM) code scanning and analysis process. Your primary focus is identifying security vulnerabilities and ensuring code quality through rigorous technical review.

Responsibilities

• Conduct thorough code scanning and analysis to identify and categorize security vulnerabilities.
• Utilize SonarQube to perform code reviews, enforce quality gates, and validate remediation.
• Develop and implement scanning strategies that proactively mitigate security risks across the development lifecycle.
• Collaborate with development teams to provide actionable recommendations for improving application security.
• Maintain up-to-date knowledge of emerging security threats to continuously enhance scanning processes.

Required Skills

• 5+ years of experience in code scanning, security vulnerability analysis, and Threat and Vulnerability Management (TVM).
• Proficiency with SonarQube for security assessments and code quality enforcement.
• Deep understanding of OWASP Top 10 and industry-standard security frameworks.
• Strong knowledge of secure coding standards and practices.
• Familiarity with scripting languages to automate scanning workflows.
• Ability to communicate technical security findings clearly to developers and stakeholders.
• Strong analytical and problem-solving skills for resolving complex security issues.
• Any graduate degree.

Preferred Skills

• Relevant security certifications such as CISSP.
• Experience with additional code scanning tools beyond SonarQube.

Key Skills

Education

ANY GRADUATE