> Markdown version of [/jobs/ext/3619110-sast-dast-checkmarx-specialist-application-security](https://www.wearedevelopers.com/jobs/ext/3619110-sast-dast-checkmarx-specialist-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAST/DAST Checkmarx Specialist/Application Security

- **Company:** First Call Trading Corporation
- **Location:** South Brunswick Township, NJ, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Github, Open Source Technology, Open Web Application Security, Systems Development Life Cycle, Power BI, Secure Coding, Systems Integration, Software Vulnerability Management, Grafana, Software Security, Gitlab-ci, Checkmarx, Prisma Cloud Platform, Devsecops, Jenkins, Servicenow, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 8, 2026
- **Apply:** https://www.disabledperson.com/jobs/75868044-sast-dast-checkmarx-specialist-application-security

## About the Role

* 10+ years of experience in Application Security, Secure SDLC, or DevSecOps.
 * Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.
 * Experience integrating security testing into CI/CD pipelines and cloud-native environments.
 * Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.

Technical Skills & Tool Experience

 * SAST: Checkmarx.
 * SCA & SBOM: Checkmarx
 * DAST & API Security: Checkmarx
 * Secrets Detection: GitGuardian/ GitHub Secret Scanning.
 * DevSecOps: Azure DevOps/ GitHub Actions/ Jenkins/ GitLab CI/CD.
 * Container & Cloud Security: Prisma Cloud/ Wiz/ Aqua/ Microsoft Defender for Cloud.
 * Reporting & ITSM: ServiceNow/ Power BI/ Grafana

Preferred Certifications

 * CEH/Security+/Certified DevSecOps Professional/AWS/Azure Security Specialty

## Description

* Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.
 * Proficient in Checkmarx - architect level (Mandatory)
 * Validate findings, eliminate false positives, and support vulnerability remediation activities.
 * Integrate security scanning into CI/CD pipelines and enforce secure development gates.
 * Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.
 * Track remediation SLAs, TTD/TTR metrics, and application security KPIs.
 * Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.
 * Support security assessments, tool optimization, reporting, and developer enablement initiatives.
 * Review the report before publishing and lead the report readout meetings with the stakeholders
 * Provide guidance and Technical governance to the team members