SAST Security Engineer
Richfield MN - Onsite
Basic Qualifications
- Direct full-time information security, static code review, remediation, testing, software development, or software engineering.
- Familiarity with popular web application languages and platforms. For example, JavaScript, HTML, .NET, Java Groovy, and Python or other similar technologies.
- Knowledge of secure development of web applications and mobile applications
- Hands on experience leading technical integration-heavy in modern security tools, especially; Checkmarx SAST, CheckmarxOne, NexusIQ, and/or Blackduck, Veracode, Snyk.
- Experienced in conducting end-to-end static analysis, using at least one commercial, application scanning tool.
- Experienced in application onboarding, triaging, remediation with application teams and verifying proposed findings.
- Hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment including a deep understanding of CI/CD.
- Organize, maintain, and report on project workflows, statuses, and technical tasks.
- Identify, facilitate, and track on-going process and automation-based process improvements.
- Ability to quickly adapt to new technologies, tools and techniques
- Ability to perform in a fast paced, dynamic work environment and meet aggressive deadlines
- Ability to work with technical and non-technical team members
- Strong technical writing and verbal communication skills
Experience Qualifications
- 5+ years of experience SAST and SCA security tools; Checkmarx and CheckmarxOne, and Nexus IQ
- 5+ year of experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilities
- 5+ years of experience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.
- 5+ years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.
- 3+ years of recent, hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment including a deep understanding of CI/CD.
- 3+ years, with expert-level skills, in SDLC workflow management tools like Jira, Confluence, SharePoint or similar.
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.