Job Seekers, Please send resumes to resumes@hireitpeople.com

Qualifications:

• Experience with Veracode SAST, DAST and Nexus IQ
• Subject matter expertise in application security and vulnerability assessments
• Strong knowledge of OWASP Top 10 (2013 and/or 2017 Version) vulnerability detection and mitigation
• High degree of accuracy and attention to detail
• Excellent organization skills and ability to multitask
• Familiarity in .NET or Java is desirable
• Familiarity with IDEs, e.g. Visual Studio, eclipse or IntelliJ IDEA
• Familiarity with ServiceNow, Jira
• Familiarity with build systems such as Bamboo, Jenkins, AWS native build tool

Minimum years of experience*: 5

Responsibilities you would expect the Subcon to shoulder and execute*:

• Assist in onboarding application teams and applications to Secure SDLC controls (e.g., SAST, DAST) including remediation guidance, issue tracking and metrics
• Assist in integration of security tools (e.g., DAST, SAST, SCA, etc.) in the delivery pipeline and the S-SDLC process
• Provide remediation coaching to development teams on how to build a more secure application, including explanations of risk assessment, e.g. likelihood, impact, and the OWASP Top 1

Interview Process (Is face to face required?) No