Job description
Required Skills:
Bachelor’s degree in Cybersecurity.
At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
Working directly with software-development teams to resolve security findings.
Experience with software supply-chain security, dependency risk, or software-composition analysis.
Understanding of secure software-development lifecycle practices.
Integrating automated security scanning into software-development or CI/CD workflows.
Ability to clearly document technical findings and communicate them to developers and technical stakeholders.
Experience That Can Strengthen Your Fit:
Experience with several of the following can improve alignment:
GitLab-based development and CI/CD workflows.
Artifactory or similar artifact-management platforms.
OpenShift, Kubernetes, and containerized application environments.
Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
Secure-code review and remediation verification.
Application-security testing in disconnected, restricted, or customer-managed environments.
Supporting classified, defense, aerospace, government, or other regulated software environments.
Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.