SAST Checkmarx Specialist

Programmers.io; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Programmers.io in Dallas seeks an experienced Applications Security Testing lead to drive security assessments and testing strategy across projects. You will oversee SAST, DAST and SCA, run automated and manual reviews, and steer a secure DevSecOps pipeline for major customers.

You will also advise design and development teams on secure requirements and champion improvements to the security architecture and compliance lifecycle.

Qualifications

• At least 10 years of IT security experience with focus on application security testing and development.
• Experience in Application Security Assessments, Secure Code Review, DAST & SAST.
• Proficient with SAST tools such as AppScan Source, Fortify, Checkmarx.

Responsibilities

• Lead Application Security Testing activities and define testing methodology for stakeholders.
• Conduct SAST scans and Software Composition Analysis (SCA).
• Perform automated tool scanning and execute manual reviews.
• Manage DevSecOps pipeline for major customers with strong security controls.
• Provide security consulting to design and development teams on secure requirements.
• Recommend process improvements to align security architecture with compliance.

Skills

Application security testing

SAST & DAST

DevSecOps

Security consulting

Secure coding

Security frameworks

Communication

Tools

AppScan Source

Fortify

Checkmarx

Nessus

Veracode

IBM AppScan

Job description

• To lead the Applications Security Testing related activities, providing technical assessment of scope, principal security concerns and testing methodology to relevant stakeholders.
• Conduct Static Application Security Testing(SAST) Scans and Software Composition Analsys(SCA)
• Perform automated tool scanning
• Execute manual reviews
• Managing DevSecOps pipeline for major customer ensuring strong security measures and standards meeting business requirements.
• Providing security consulting to various teams (design, development) on security measures to be incorporated in the requirements during design, development phases and the best practices to be followed for a secure application development.
• Recommended process improvement to optimize security architecture lifecycle removing silos introducing compliance layer onto the review process.

Experience and Qualifications required

• Has at least 10 years of experience in IT security and preferably in Application security testing and Development.
• Experience in Application Security Assessment, Secure Code Review– DAST & SAST
• Experience in SAST (Static Application Security Testing) tools like IBM AppScan Source, HP Fortify, Checkmarx etc
• Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM appscan etc.
• Expert in secure programming Coding for the languages like java, C,C++, .Net, python etc.
• Expert in Security Frameworks to protect the applications from various attacks
• Has excellent written and verbal communications skills and able to work with technical experts in the industry as well as able to connect with business stakeholders at a non-technical level