SAST Remediation Engineer

Programmers.io; Pittsburgh (Allegheny County); On-site; USD 80,000 - 100,000; Full time

Job summary

Programmers.io is looking for a skilled individual to deliver strong security and remediation services tailored to enterprise project needs. The ideal candidate will have solid experience in Java/.Net and secure code review, alongside competencies in security frameworks like OWASP Top 10 and NIST.

This role demands a profound understanding of security mechanisms, as well as the ability to document vulnerabilities and offer remediation strategies. Strong communication skills are essential for interacting with various teams effectively.

Qualifications

• Good experience in Java/.Net and secure code review.
• Solid competencies in information security processes and technologies.
• Ability to understand vulnerabilities and articulate security risks.

Responsibilities

• Provide strong security and remediation services.
• Apply security best practices for enterprise customers.
• Document vulnerabilities and collaborate on remediation.

Skills

Java

.Net

Secure code review

Application Vulnerability Assessment

Penetration Testing

Ethical Hacking

OWASP Top 10

NIST

OSSTMM

OSINT

Fortify

Veracode

Python

Education

Security/technology-related certifications

Job description

• This role is responsible for providing strong security and remediation services to meet project requirements.
• MUST have good experience in Java/ .Net and secure code review.
• Apply security best practices while designing and proposing solutions to enterprise customers.
• Solid competencies in information security processes, framework, and technologies, such as: Application Vulnerability Assessment, Penetration Testing, Ethical Hacking, OWASP Top 10, NIST, OSSTMM, OSINT etc.
• Good understanding of supported frameworks and cleansers functions
• Good understanding on core security mechanisms, crypto libraries, and server-side security
• Ability to understand vulnerabilities, interact and explain security risks/ impact to teams.
• Document vulnerabilities and collaborate with application team to help provide detail remediation along with code snippet.
• Experience in tools lie Fortify, Veracode
• Adopt risk-based approach to translate technology risk into actual business impacts and prioritized actions.
• Ability to listen and articulate ideas verbally and in written formats to a broad range of audiences; ability to ask probing questions and deliver presentations that have impact.
• Any security / technology related (Java/ .Net/ Python) certifications are a plus.
• Exposure to banking/ financial services domain is a plus.