Application Security Specialist

Job summary

This role focuses on enhancing application security within a collaborative team environment. The Application Security Specialist will work closely with software development teams to identify and remediate security vulnerabilities in commercial products, emphasizing secure development practices.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Software Engineering, or a related field, or equivalent practical experience.
• Hands-on experience in application security, secure coding, vulnerability assessment, and SAST technologies.
• Strong understanding of vulnerability management principles and remediation processes.
• Experience with Checkmarx or similar SAST platforms.
• Familiarity with vulnerability scoring frameworks like CVSS.
• Knowledge of security standards such as CIS controls and secure software development practices.
• Excellent analytical, documentation, and reporting skills.
• Ability to communicate technical findings to both technical and non-technical audiences.

Responsibilities

• Conduct technical reviews and triage vulnerability findings from SAST, SCA, and container scans.
• Analyze findings from Checkmarx to differentiate true positives from false positives.
• Assess vulnerabilities based on CVSS, exploitability, and business impact to prioritize remediation efforts.
• Collaborate with development teams to identify root causes of vulnerabilities and provide guidance on secure coding practices.
• Promote secure development practices aligned with OWASP standards.
• Contribute to the creation of AI-assisted workflows for vulnerability management.
• Develop and maintain metrics, dashboards, and reports related to vulnerability remediation and security compliance.
• Maintain documentation and audit trails for security assessments and remediation activities.

Skills

• Strong analytical skills and attention to detail.
• Effective communication skills for sharing technical findings.
• Team-oriented with a commitment to knowledge sharing.

Education

• Relevant degree in Cybersecurity, Information Security, Computer Science, Software Engineering, or equivalent experience.

Tools

• Experience with Checkmarx and other SAST platforms.