SAST Consultant_MAST
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Key details
- Location
- Bengaluru, KA, India
- Work style
- Onsite
- Level
- Senior
- Job type
- Full-time
- Experience
- 5–8 yrs
- Function
- Operations & Strategy
- Focus area
- other
- Posted
- 5d ago
Skills
agileapplication securityawsazureazure devopsbashc#ci/cdcloud computingdevopsdevsecopsgcpgithubgithub actionsgitlabjavajenkinsprocess optimizationpythonsastscriptingsdlcsecure codingsonarqubetroubleshootingvulnerability management
About the role
-
Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.
-
Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments.
-
Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.
-
Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows.
-
Strong hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.
-
Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins.
-
Proficiency in scripting languages such as Python or Bash for security automation and process optimization.
-
Development experience in at least one programming language such as Python, Java, C, or C#.
-
Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
-
Knowledge of secure coding practices, vulnerability management, and application security best practices.
-
Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.
-
Experience performing Application Security Assessments, vulnerability analysis, and remediation validation.
-
Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.
-
Experience working within Agile, DevOps, and cloud-native development environments.
-
Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.
-
Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments.
-
Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.
-
Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows.
-
Strong hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.
-
Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins.
-
Proficiency in scripting languages such as Python or Bash for security automation and process optimization.
-
Development experience in at least one programming language such as Python, Java, C, or C#.
-
Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).
-
Knowledge of secure coding practices, vulnerability management, and application security best practices.
-
Strong understanding of OWASP Top 10, secure development methodologies, and risk-based remediation.
-
Experience performing Application Security Assessments, vulnerability analysis, and remediation validation.
-
Ability to analyze security findings, provide remediation guidance, and work closely with development teams to address risks.
-
Experience working within Agile, DevOps, and cloud-native development environments.
Prior Experience:
The candidate must have 4 to 8 years of relevant experience in a similar role, preferably in a professional services organization.
Get jobs like this as soon as they're posted
ApplyHour checks company career sites all day and ranks every opening against your profile. Free to join.