Security Engineer – SAST & SCA (Application Security

Job Title:

Security Engineer – SAST & SCA (Application Security)

Location:

San Jose, CA (5 Days Onsite)

• 10+ years of experience in Application Security, Dev Sec Ops , or Secure Software Development.
• Hands-on experience with SAST tools:
  Checkmarx, Fortify, Veracode, CodeQL
• Experience with SCA tools:
  Snyk, Black Duck, Mend (White Source), Sonatype, Dependabot
• Strong understanding of: OWASP Top 10
• Secure Coding Practices, Vulnerability Management, CVSS Scoring
• Experience integrating security into:
  Git Hub, Git Lab, Azure Dev Ops, Jenkins, CI/CD Pipelines
• Scripting knowledge in Python, Bash, or Power Shell.
• Experience with Jira or similar ticketing tools.

• SBOM (CycloneDX, SPDX)
• Container Security
• Dependency Scanning
• Cloud Application Security
• Infrastructure as Code (Terraform Security)

CSSLP, GWAPT, or OSCP certifications are required.

• Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
• Identify, prioritize, and remediate vulnerabilities in applications and open-source software.
• Integrate security into CI/CD pipelines and developer workflows.
• Automate security scans, reporting, and vulnerability tracking.
• Partner with engineering teams to promote secure coding practices.
• Support compliance initiatives including ISO and SOC
  2.

Contact:
Sana Parikshith