Job description:: What they'll do:
- Remediate application security findings hands-on: read the code, write the fix, open the PR. This is a dev-facing role, not a ticket-filing role.
- Deploy, configure, and tune SAST and SCA tooling in our CI/CD pipelines and repos, including rule tuning and false positive cleanup.
- Triage findings from SAST, SCA, and pen tests, prioritize them, and drive them to closure with engineering teams.
- Review PRs and designs for security issues and help build secure coding guidance for developers.
What we need:
- Software development background in Python and Go. Must be comfortable writing production code and opening PRs.
- Hands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues).
- Direct experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output.
- Works well with developers and can explain findings in plain language.
- Available during US business hours.
Nice to have: healthcare or other regulated-industry experience.
Rate:
Not specified
Location:
Remote
IR35 Status:
Outside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Senior