Senior AppSec Lead: Checkmarx SAST/DAST

Programmers.io; Texas; On-site; USD 120,000 - 180,000; Full time

Job summary

Programmers.io is seeking a seasoned Applications Security Specialist to lead testing activities, assess security scope, and align with stakeholders. The role emphasizes SAST/DAST, automated and manual reviews, and DevSecOps pipeline management for major clients.

You will provide security consulting during design and development, promote secure coding practices, and drive lifecycle improvements to remove silos and add a compliance layer to reviews.

Qualifications

• 10+ years of IT security experience, preferably in application security testing and development.
• Experience in application security assessment and secure code review (DAST & SAST).
• Experience with SAST tools such as IBM AppScan Source, HP Fortify, Checkmarx.
• Proficient in secure programming languages: Java, C, C++, .NET, Python.
• Excellent written and verbal communication; able to engage stakeholders at a non-technical level.

Responsibilities

• Lead application security testing activities and provide technical assessment to stakeholders.
• Conduct SAST scans and Software Composition Analysis.
• Perform automated tool scanning and execute manual reviews.
• Manage DevSecOps pipeline for major customers with strong security measures.
• Provide security consulting during design and development, promoting best practices.
• Recommend process improvements to security architecture lifecycle and compliance.

Skills

Application security

Security testing

Secure coding

Stakeholder communication

Tools

Checkmarx

Fortify

Nessus

Veracode

IBM AppScan

Job description

Programmers.io is seeking a seasoned Applications Security Specialist to lead testing activities, assess security scope, and align with stakeholders. The role emphasizes SAST/DAST, automated and manual reviews, and DevSecOps pipeline management for major clients.

You will provide security consulting during design and development, promote secure coding practices, and drive lifecycle improvements to remove silos and add a compliance layer to reviews.