Description
Accountabilities
- Operate and maintain application security scanning tools, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), secrets scanning, and container scanning, throughout the software development lifecycle.
- Review and triage security findings, validate true positives, assess potential risks, and collaborate with engineering teams to prioritize remediation activities.
- Track vulnerabilities from identification through resolution, ensuring remediation progress is monitored and service-level agreements (SLAs) are met.
- Support the onboarding of new repositories and services into existing security scanning tools and workflows.
- Collaborate with developers and other stakeholders to communicate findings clearly, provide actionable remediation guidance, and encourage secure development practices.
- Maintain internal documentation, operational runbooks, and procedures while identifying opportunities to improve security processes and workflows.
- Assist senior team members with basic scripting, automation, and tool integration tasks to streamline repetitive activities and improve program efficiency.
- Requirements 2–4 years of experience in application security, security engineering, software engineering, quality assurance (QA), or a related technical role.
- Working knowledge of common application vulnerabilities, particularly the OWASP Top 10, and familiarity with secure software development lifecycle (SSDLC) practices.
- Basic
Full description, company and the link to apply — after you sign in.
Sign inEmployer contacts (email/phone/telegram) are hidden from the public preview —
send your CV, and we will connect you directly.