Systems Engineer - Security with Secret
Summary
Systems Engineer focused on application security, integrating automated SAST/DAST scanning (Fortify, JFrog Xray, OWASP ZAP) into CI/CD pipelines and working with development teams on vulnerability remediation.
Required Skills:
- Bachelor’s degree in Cybersecurity.
- At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
- Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
- Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
- Working directly with software-development teams to resolve security findings.
- Experience with software supply-chain security, dependency risk, or software-composition analysis.
- Understanding of secure software-development lifecycle practices.
- Integrating automated security scanning into software-development or CI/CD workflows.
- Ability to clearly document technical findings and communicate them to developers and technical stakeholders.
Experience That Can Strengthen Your Fit:
Experience with several of the following can improve alignment:
- GitLab-based development and CI/CD workflows.
- Artifactory or similar artifact-management platforms.
- OpenShift, Kubernetes, and containerized application environments.
- Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
- Secure-code review and remediation verification.
- Application-security testing in disconnected, restricted, or customer-managed environments.
- Supporting classified, defense, aerospace, government, or other regulated software environments.
- Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.