Cyber Security Engineer

Job Summary

We are looking for an experienced Cybersecurity Engineer & Consultant with strong hands‑on expertise in Open Text Fortify and application security. The role will be responsible for implementing, configuring, integrating, and supporting Fortify solutions across enterprise environments while providing cybersecurity consulting and professional‑services expertise. The ideal candidate will have strong experience in Fortify SAST, SCA, SSC, DAST/Web Inspect, application security testing, vulnerability management, and Dev Sec Ops, along with the ability to work directly with customers and cross‑functional technical teams.

• Implement, configure, and support Open Text Fortify application security solutions.
• Conduct application security assessments using Fortify SAST, SCA, DAST/Web Inspect, and related technologies.
• Configure and administer Fortify Software Security Center (SSC).
• Integrate Fortify with enterprise development environments and CI/CD pipelines.
• Support Dev Sec Ops initiatives by embedding security testing throughout the SDLC.
• Configure Fortify scanning policies, security rules, application profiles, and security controls.
• Analyze scan results and perform vulnerability triage, validation, and false-positive analysis.
• Work with development teams to identify root causes and provide vulnerability remediation guidance.
• Monitor application security risks and prepare security reports and dashboards.
• Support Fortify upgrades, migrations, integrations, configuration changes, and troubleshooting.
• Design and implement application security solutions based on customer requirements.
• Conduct security assessments, technical workshops, demonstrations, and knowledge-transfer sessions.
• Develop HLD/LLD, implementation plans, configuration guides, and operational documentation.
• Collaborate with application development, Dev Ops, infrastructure, SOC, cybersecurity, and project teams.
• Provide technical consulting throughout implementation, testing, deployment, and post-production support.
• Identify opportunities to improve application security processes, automation, and Dev Sec Ops maturity.
• Ensure implemented solutions comply with organizational security standards and application-security best practices.

• Open Text Fortify
• Fortify SAST
• Fortify SCA
• Fortify Software Security Center (SSC)
• Fortify DAST / Web Inspect
• Application Security Vulnerability Assessment & Management
• SAST / DAST / SCA
• Dev Sec Ops
• Secure SDLC
• Application Security Testing
• Vulnerability Triage & Remediation
• Security Risk Assessment
• Security Reporting
• Security Controls & Policies
• Cybersecurity Consulting
• Integration & Dev Ops Skills
• Jenkins
• Git Lab CI/CD
• Azure Dev Ops
• Git Hub Actions
• Git CI/CD pipeline security integration
• REST APIs
• Automation and scripting SDLC integration
• Dev Sec Ops toolchain integration
• Cybersecurity Skills
• Application security architecture
• Vulnerability management
• Secure coding principles
• OWASP Top 10
• Web application security
• API security
• Risk assessment and vulnerability prioritization
• Security remediation and mitigation
• Threat and security analysis
• Security testing methodologies
• Cybersecurity best practices
• Security governance and compliance awareness

• 5+ years of experience in cybersecurity, application security, security engineering, or security consulting.
• Strong hands‑on experience implementing and supporting Open Text Fortify solutions.
• Experience with Fortify SAST, SCA, SSC, and DAST/Web Inspect.
• Strong understanding of application security testing and vulnerability management.
• Experience integrating security tools into CI/CD and Dev Ops environments.
• Experience working with development and Dev Ops teams to remediate security vulnerabilities.
• Experience in enterprise application-security environments.
• Professional Services / Consulting experience is strongly preferred.
• Strong customer-facing, communication, presentation, and stakeholder-management skills.
• Ability to independently troubleshoot technical issues and provide security recommendations.

• Open Text Fortify Certification Certified Ethical Hacker (CEH) OSCPCISSPCSSLPG IAC certifications Relevant Dev Sec Ops / Application Security certifications