Application Security Engineering (SAST)- Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Lensa, so some details may not match this job. The employer's own page has the real description.

Overview

The Application Security Engineering (SAST) role at Lensa is a pivotal position within our security team, focused on developing and implementing secure coding practices through Static Application Security Testing (SAST). This remote opportunity is designed for a proactive individual who will actively participate in identifying, analyzing, and remediating security vulnerabilities within our software applications. The candidate will collaborate with development teams to cultivate a security-first mindset and ensure the safe deployment of high-quality software solutions.

Job Responsibilities

• Conduct static code analysis using various SAST tools to identify vulnerabilities.
• Collaborate with software development teams to integrate secure coding practices into the SDLC.
• Review application architecture and code to recommend security improvements and best practices.
• Develop and maintain documentation and training materials for secure coding standards.
• Create remediation plans for identified vulnerabilities and assist development teams in addressing these issues.
• Participate in security assessments and audits to ensure compliance with industry standards.
• Engage in incident response strategies and contribute to post-mortem analysis.
• Stay current with emerging threats and vulnerabilities affecting the software development landscape.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in application security or software development.
• Proficient knowledge of coding languages such as Java, C#, or JavaScript.
• Experience with SAST tools such as Veracode, Checkmarx, or SonarQube.
• Strong understanding of security principles, secure coding practices, and common vulnerabilities (e.g., OWASP Top Ten).
• Excellent analytical and problem-solving skills.
• Strong communication skills, with the ability to convey technical information to non-technical stakeholders.

Technologies & Tools

The ideal candidate will work with a variety of security and development tools, including but not limited to Static Application Security Testing (SAST) tools such as Veracode and Checkmarx, Integrated Development Environments (IDEs), version control systems like Git, and CI/CD pipelines to facilitate the secure software development process. Familiarity with cloud platforms and containerization technologies such as AWS, Azure, Docker, and Kubernetes will also be beneficial.

Ideal Candidates

Ideal candidates for the Application Security Engineering (SAST) position will possess a strong foundation in application security, paired with a passion for enhancing software integrity. They are self-motivated, detail-oriented individuals who excel at problem-solving and have a keen interest in keeping up with the latest security trends and advancements. Furthermore, successful candidates will demonstrate the ability to work collaboratively across teams, communicate effectively, and contribute to a culture of security awareness throughout the organization.