Job description

Required Skills: • Bachelor’s degree in Cybersecurity. • At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation. • Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP. • Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities. • Working directly with software-development teams to resolve security findings. • Experience with software supply-chain security, dependency risk, or software-composition analysis. • Understanding of secure software-development lifecycle practices. • Integrating automated security scanning into software-development or CI/CD workflows. • Ability to clearly document technical findings and communicate them to developers and technical stakeholders. Experience That Can Strengthen Your Fit: Experience with several of the following can improve alignment: • GitLab-based development and CI/CD workflows. • Artifactory or similar artifact-management platforms. • OpenShift, Kubernetes, and containerized application environments. • Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools. • Secure-code review and remediation verification. • Application-security testing in disconnected, restricted, or customer-managed environments. • Supporting classified, defense, aerospace, government, or other regulated software environments. • Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.

Requirements

Must-haves

Bachelor’s degree in Cybersecurity.
At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
Working directly with software-development teams to resolve security findings.
Experience with software supply-chain security, dependency risk, or software-composition analysis.
Understanding of secure software-development lifecycle practices.
Integrating automated security scanning into software-development or CI/CD workflows.
Ability to clearly document technical findings and communicate them to developers and technical stakeholders.
Experience with several of the following can improve alignment:
GitLab-based development and CI/CD workflows.
Artifactory or similar artifact-management platforms.
OpenShift, Kubernetes, and containerized application environments.
Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
Secure-code review and remediation verification.
Application-security testing in disconnected, restricted, or customer-managed environments.
Supporting classified, defense, aerospace, government, or other regulated software environments.
Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdkubernetesaiml

Platform: jazzhr
Effort: medium