Appsac: Application Security

ALLTECH CONSULTING SVC INC; Minnesota; Vor Ort; USD 110.000 - 160.000; Vollzeit

Zusammenfassung

A technology consulting firm located in Minnesota is seeking a professional with extensive experience in SAST and SCA security tools. The ideal candidate has over 5 years of experience in vulnerability analysis, application onboarding, and hands-on development of RESTful APIs. Candidate must possess strong skills in managing SDLC workflows using tools like Jira and Confluence.

Qualifikationen

• 5+ years of experience with SAST and SCA security tools.
• Experienced in customizing security tools queries to find vulnerabilities.
• Conducted end-to-end SAST and SCA analysis using commercial application scanning tools.
• Onboarding, triaging, remediation with application teams and verifying findings.
• 3+ years developing RESTful APIs in automated development environments and strong CI/CD understanding.
• 3+ years with SDLC workflow tools (Jira, Confluence, SharePoint).

Kenntnisse

Experience with SAST and SCA security tools

Expert-level skills in SDLC workflow management tools

Hands-on development experience with RESTful APIs

CI/CD

End-to-end security analysis

Tools

Checkmarx

Nexus IQ

Jira

Confluence

Confluence

SharePoint

Jobbeschreibung

Experience Qualifications

• 5+ years of experience SAST and SCA security tools; Checkmarx and CheckmarxOne, and Nexus IQ


• 5+ year of experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilities


• 5+ years of experience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.


• 5+ years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.


• 3+ years of recent, hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment – including a deep understanding of CI/CD.


• 3+ years, with expert-level skills, in SDLC workflow management tools like Jira, Conftuence, SharePoint or similar.