Senior SAST & AppSec Lead — Checkmarx & DevSecOps

Programmers; Dallas (TX); On-site; USD 180,000 - 230,000; Full time

Job summary

Programmers is seeking an experienced security professional to lead application security testing across our software portfolio. You will drive SAST/DAST engagements, conduct secure code reviews, and guide DevSecOps practices to improve secure development lifecycle.

Ideal candidates bring 10+ years in IT security, deep knowledge of Java, C, C++, .NET, and Python, and hands-on use of Checkmarx, Fortify, and related tools. This role focuses on risk reduction and secure design guidance.

Qualifications

• Ten or more years in IT security, with emphasis on application security testing and development.
• Strong expertise in SAST, DAST, secure code review, SCA, and DevSecOps.
• Hands-on with security tools such as Checkmarx, Fortify, IBM AppScan, Veracode, Nessus.
• Experience conducting SAST scans, automated security testing, false-positive analysis, and security consulting.
• Knowledge of secure coding in Java, C, C++, .NET, and Python.

Responsibilities

• Lead Application Security Testing initiatives.
• Execute SAST/SCA scans and vulnerability assessments.
• Manage DevSecOps security pipelines.
• Provide secure application design and development guidance.
• Drive security process improvements and compliance integration.

Skills

IT Security experience

Application Security

Secure coding practices

DevSecOps

Tools

Checkmarx

Fortify

IBM AppScan

Veracode

Nessus

Job description

Programmers is seeking an experienced security professional to lead application security testing across our software portfolio. You will drive SAST/DAST engagements, conduct secure code reviews, and guide DevSecOps practices to improve secure development lifecycle.

Ideal candidates bring 10+ years in IT security, deep knowledge of Java, C, C++, .NET, and Python, and hands-on use of Checkmarx, Fortify, and related tools. This role focuses on risk reduction and secure design guidance.