Senior Application Security Lead: SAST & SCA Expert

Wipro Technologies; Cincinnati (OH); On-site; USD 60,000 - 135,000; Full time

Benefits offered by this job

Medical and dental benefits

Paid time off

Job summary

Wipro Limited is seeking a Senior Consultant for Application Security testing (SAST and SCA) in Cincinnati, OH. The role focuses on leading SAST/SCA initiatives, integrating security into CI/CD, and guiding developers in secure coding practices.

The candidate should have 6–8 years in application security, hands-on experience with Fortify, Checkmarx, Veracode, and SCA tools like Sonatype/Black Duck/Snyk, and a strong understanding of OWASP Top 10.

Qualifications

• Bachelor’s degree in a technical field.
• 6–8 years of experience in application security / SAST / SCA.
• Hands-on experience with SAST tools (Fortify, Checkmarx, Veracode) and SCA tools (Sonatype, Black Duck, Snyk).
• Knowledge of secure coding practices and OWASP Top 10.
• Ability to analyze code (Java, .NET, JavaScript) and identify vulnerabilities.

Responsibilities

• Perform Static Application Security Testing (SAST) across applications (Java, .NET, Node, Angular).
• Perform Software Composition Analysis (SCA) to identify vulnerable open-source components and license risks.
• Configure, execute, and optimize SAST/SCA scans; validate findings and remove false positives.
• Analyse code-level vulnerabilities and provide remediation guidance to developers.
• Support integration of SAST/SCA into CI/CD pipelines (DevSecOps).
• Track vulnerabilities through closure and support remediation.
• Deliver secure coding awareness/training sessions to development teams.
• Familiarity with secure coding approaches across technologies.

Skills

SAST

SCA

Fortify

Checkmarx

Veracode

OWASP Top 10

CI/CD

DevSecOps

Training

Communication

Education

Bachelor’s degree in a technical field

Tools

Sonatype

Black Duck

Snyk

Job description

Wipro Limited is seeking a Senior Consultant for Application Security testing (SAST and SCA) in Cincinnati, OH. The role focuses on leading SAST/SCA initiatives, integrating security into CI/CD, and guiding developers in secure coding practices.

The candidate should have 6–8 years in application security, hands-on experience with Fortify, Checkmarx, Veracode, and SCA tools like Sonatype/Black Duck/Snyk, and a strong understanding of OWASP Top 10.