×
Register Here to Apply for Jobs or Post Jobs. X

Security Engineer – SAST & SCA; Application Security

Job in San Jose, Santa Clara County, California, 95199, USA
Listing for: US staffing Inc
Full Time position
Listed on 2026-09-21
Job specializations:
  • IT/Tech
    Cybersecurity, Information Security & Data Protection, Security Management & Operations, IT Consultant
Salary/Wage Range or Industry Benchmark: 150000 - 210000 USD Yearly USD 150000.00 210000.00 YEAR
Job Description & How to Apply Below

Job Title:

Security Engineer – SAST & SCA (Application Security)

Location:

San Jose, CA (5 Days Onsite)

We are actively hiring an experienced Security Engineer with expertise in Application Security (App Sec), Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dev Sec Ops . This is an excellent opportunity to work with development teams to build secure applications and integrate security throughout the SDLC.

Required Skills
  • 10+ years of experience in Application Security, Dev Sec Ops , or Secure Software Development.
  • Hands-on experience with SAST tools:
    Checkmarx, Fortify, Veracode, CodeQL
  • Experience with SCA tools:
    Snyk, Black Duck, Mend (White Source), Sonatype, Dependabot
  • Strong understanding of: OWASP Top 10
  • Secure Coding Practices, Vulnerability Management, CVSS Scoring
  • Experience integrating security into:
    Git Hub, Git Lab, Azure Dev Ops, Jenkins, CI/CD Pipelines
  • Scripting knowledge in Python, Bash, or Power Shell.
  • Experience with Jira or similar ticketing tools.
Preferred Skills
  • SBOM (CycloneDX, SPDX)
  • Container Security
  • Dependency Scanning
  • Cloud Application Security
  • Infrastructure as Code (Terraform Security)

CSSLP, GWAPT, or OSCP certifications are required.

Responsibilities
  • Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
  • Identify, prioritize, and remediate vulnerabilities in applications and open-source software.
  • Integrate security into CI/CD pipelines and developer workflows.
  • Automate security scans, reporting, and vulnerability tracking.
  • Partner with engineering teams to promote secure coding practices.
  • Support compliance initiatives including ISO and SOC2

Contact:
Sana Parikshith

To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
 
 
 
Search for further Jobs Here:
(Try combinations for better Results! Or enter less keywords for broader Results)
Location
Increase/decrease your Search Radius (miles)
0
200
Filters
Education Level
Experience Level (years)
Posted in last:
Salary