SAST & AppSec Lead — Checkmarx Specialist

Programmers.io; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Programmers.io in Dallas seeks an experienced Applications Security Testing lead to drive security assessments and testing strategy across projects. You will oversee SAST, DAST and SCA, run automated and manual reviews, and steer a secure DevSecOps pipeline for major customers.

You will also advise design and development teams on secure requirements and champion improvements to the security architecture and compliance lifecycle.

Qualifications

• At least 10 years of IT security experience with focus on application security testing and development.
• Experience in Application Security Assessments, Secure Code Review, DAST & SAST.
• Proficient with SAST tools such as AppScan Source, Fortify, Checkmarx.

Responsibilities

• Lead Application Security Testing activities and define testing methodology for stakeholders.
• Conduct SAST scans and Software Composition Analysis (SCA).
• Perform automated tool scanning and execute manual reviews.
• Manage DevSecOps pipeline for major customers with strong security controls.
• Provide security consulting to design and development teams on secure requirements.
• Recommend process improvements to align security architecture with compliance.

Skills

Application security testing

SAST & DAST

DevSecOps

Security consulting

Secure coding

Security frameworks

Communication

Tools

AppScan Source

Fortify

Checkmarx

Nessus

Veracode

IBM AppScan

Job description

Programmers.io in Dallas seeks an experienced Applications Security Testing lead to drive security assessments and testing strategy across projects. You will oversee SAST, DAST and SCA, run automated and manual reviews, and steer a secure DevSecOps pipeline for major customers.

You will also advise design and development teams on secure requirements and champion improvements to the security architecture and compliance lifecycle.