Systems Engineer - Security with Secret
Summary
Integrates security scanning into CI/CD pipelines, triages vulnerabilities, and works with dev teams to remediate issues using tools like Fortify, JFrog Xray, and OWASP ZAP.
Required Skills & Qualifications:
- Bachelor’s degree in Cybersecurity.
- At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
- Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
- Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
- Working directly with software-development teams to resolve security findings.
- Experience with software supply-chain security, dependency risk, or software-composition analysis.
- Understanding of secure software-development lifecycle practices.
- Integrating automated security scanning into software-development or CI/CD workflows.
- Ability to clearly document technical findings and communicate them to developers and technical stakeholders.