Senior Application Security Engineer – Snyk, SAST, SCA & DAST

10 years of experience in Application Security, Cybersecurity, or DevSecOps.
5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
3 years of implementation, administration, or engineering experience with Snyk.
Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.
Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.

Required skills

Application SecurityCybersecurityDevSecOps practices and tooling integrationEnterprise SAST platform implementation and administrationEnterprise SCA platform implementation and administrationEnterprise DAST platform implementation and administrationSnyk implementation, administration, and engineeringMigration of application security tooling (e.g., Veracode to Snyk)Supporting compliance and security requirements for regulated industries (banking, finance, insurance, healthcare, government)NIST Secure Software Development Framework (SSDF) knowledgeOWASP Top 10 familiarity and remediation guidanceOWASP API Security Top 10 familiarity and remediation guidanceCloud security for AWS and Azure (relevant certifications/practices)

Similar jobs