Job description: Senior Application Security Engineer – Secure Code Scanning Implementation

Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
Establish vulnerability management processes, including triage, risk prioritization, exception handling, SLA definition, and remediation tracking.
Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization activities while mentoring development teams on secure coding practices.
Demonstrated experience implementing similar Application Security and Secure Coding solutions in large enterprise environments, with strong knowledge of SAST, vulnerability management, SDLC, and DevSecOps practices.

Erforderliche Kompetenzen

Secure Code Scanning Platforms (Snyk, Fortify, Checkmarx, Veracode)Static Application Security Testing (SAST)CI/CD and DevOps Integrations (GitHub, GitLab, CI/CD pipelines)Vulnerability Management (triage, risk prioritization, exception handling, SLA, remediation tracking)SDLC and DevSecOps practicesDesigning scanning strategies, quality gates, and policy enforcementSecure coding practices and developer mentoringAutomation and policy enforcement in security toolingHands-on implementation, testing, rollout, and post-go-live stabilization of security toolsDeveloping technical standards, deployment procedures, runbooks, and governance processesIdentifying and mitigating integration dependencies, developer adoption issues, and performance impactsCross-functional collaboration and stakeholder management with development, DevOps, and security teams

Ähnliche Stellen