SAST/DAST Checkmarx Specialist/Application Security

• Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.
• Proficient in Checkmarx - architect level (Mandatory)
• Validate findings, eliminate false positives, and support vulnerability remediation activities.
• Integrate security scanning into CI/CD pipelines and enforce secure development gates.
• Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.
• Track remediation SLAs, TTD/TTR metrics, and application security KPIs.
• Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.
• Support security assessments, tool optimization, reporting, and developer enablement initiatives.
• Review the report before publishing and lead the report readout meetings with the stakeholders
• Provide guidance and Technical governance to the team members

• 10+ years of experience in Application Security, Secure SDLC, or DevSecOps.
• Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.
• Experience integrating security testing into CI/CD pipelines and cloud-native environments.
• Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.

Technical Skills & Tool Experience

• SAST: Checkmarx.
• SCA & SBOM: Checkmarx
• DAST & API Security: Checkmarx
• Secrets Detection: GitGuardian/ GitHub Secret Scanning.
• DevSecOps: Azure DevOps/ GitHub Actions/ Jenkins/ GitLab CI/CD.
• Container & Cloud Security: Prisma Cloud/ Wiz/ Aqua/ Microsoft Defender for Cloud.
• Reporting & ITSM: ServiceNow/ Power BI/ Grafana

Preferred Certifications

• CEH/Security+/Certified DevSecOps Professional/AWS/Azure Security Specialty