SAST//Application Security with Checkmarx

Programmers.io; Dallas (TX); On-site; USD 180,000 - 230,000; Full time

Job summary

Programmers is seeking an experienced security professional to lead application security testing across our software portfolio. You will drive SAST/DAST engagements, conduct secure code reviews, and guide DevSecOps practices to improve secure development lifecycle.

Ideal candidates bring 10+ years in IT security, deep knowledge of Java, C, C++, .NET, and Python, and hands-on use of Checkmarx, Fortify, and related tools. This role focuses on risk reduction and secure design guidance.

Qualifications

• Ten or more years in IT security, with emphasis on application security testing and development.
• Strong expertise in SAST, DAST, secure code review, SCA, and DevSecOps.
• Hands-on with security tools such as Checkmarx, Fortify, IBM AppScan, Veracode, Nessus.
• Experience conducting SAST scans, automated security testing, false-positive analysis, and security consulting.
• Knowledge of secure coding in Java, C, C++, .NET, and Python.

Responsibilities

• Lead Application Security Testing initiatives.
• Execute SAST/SCA scans and vulnerability assessments.
• Manage DevSecOps security pipelines.
• Provide secure application design and development guidance.
• Drive security process improvements and compliance integration.

Skills

IT Security experience

Application Security

Secure coding practices

DevSecOps

Tools

Checkmarx

Fortify

IBM AppScan

Veracode

Nessus

Job description

Job: SAST//Application Security with Checkmarx

Job Type : || Full time||

Min. Years of Experience: 10+ Years

Key Requirements

• 10+ years of IT Security experience, preferably in Application Security Testing and Development.
• Strong experience in SAST, DAST, Secure Code Review, SCA, DevSecOps, and application security assessments.
• Hands-on expertise with security tools such as Checkmarx, Fortify, IBM AppScan, Veracode, and Nessus.
• Experience conducting SAST scans, automated security testing, false-positive analysis, manual reviews, and security consulting.
• Knowledge of secure coding practices in Java, C, C++, .NET, and Python.

Core Responsibilities

• Lead Application Security Testing initiatives.
• Execute SAST/SCA scans and vulnerability assessments.
• Manage DevSecOps security pipelines.
• Provide secure application design and development guidance.
• Drive security process improvements and compliance integration.