SAST Checkmarx/DAST with checkmarx

Programmers.io; Texas; On-site; USD 120,000 - 180,000; Full time

Job summary

Programmers.io is seeking a seasoned Applications Security Specialist to lead testing activities, assess security scope, and align with stakeholders. The role emphasizes SAST/DAST, automated and manual reviews, and DevSecOps pipeline management for major clients.

You will provide security consulting during design and development, promote secure coding practices, and drive lifecycle improvements to remove silos and add a compliance layer to reviews.

Qualifications

• 10+ years of IT security experience, preferably in application security testing and development.
• Experience in application security assessment and secure code review (DAST & SAST).
• Experience with SAST tools such as IBM AppScan Source, HP Fortify, Checkmarx.
• Proficient in secure programming languages: Java, C, C++, .NET, Python.
• Excellent written and verbal communication; able to engage stakeholders at a non-technical level.

Responsibilities

• Lead application security testing activities and provide technical assessment to stakeholders.
• Conduct SAST scans and Software Composition Analysis.
• Perform automated tool scanning and execute manual reviews.
• Manage DevSecOps pipeline for major customers with strong security measures.
• Provide security consulting during design and development, promoting best practices.
• Recommend process improvements to security architecture lifecycle and compliance.

Skills

Application security

Security testing

Secure coding

Stakeholder communication

Tools

Checkmarx

Fortify

Nessus

Veracode

IBM AppScan

Job description

• To lead the Applications Security Testing related activities, providing technical assessment of scope, principal security concerns and testing methodology to relevant stakeholders.
• Conduct Static Application Security Testing(SAST) Scans and Software Composition Analsys(SCA)
• Perform automated tool scanning
• Execute manual reviews
• Managing DevSecOps pipeline for major customer ensuring strong security measures and standards meeting business requirements.
• Providing security consulting to various teams (design, development) on security measures to be incorporated in the requirements during design, development phases and the best practices to be followed for a secure application development.
• Recommended process improvement to optimize security architecture lifecycle removing silos introducing compliance layer onto the review process.

Experience and Qualifications required

• Has at least 10 years of experience in IT security and preferably in Application security testing and Development.
• Experience in Application Security Assessment, Secure Code Review– DAST & SAST
• Experience in SAST (Static Application Security Testing) tools like IBM AppScan Source, HP Fortify, Checkmarx etc
• Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM appscan etc.
• Expert in secure programming Coding for the languages like java, C,C++, .Net, python etc.
• Expert in Security Frameworks to protect the applications from various attacks
• Has excellent written and verbal communications skills and able to work with technical experts in the industry as well as able to connect with business stakeholders at a non-technical level