SAST Security Engineer

Job ID: SRJ_7280Posted: 2025-06-26Location: Richfield , MNEmployment Type: C2CIndustry: Computer SoftwareClient: WiproContact: Meghana GorusuCompany: SRI Tech SolutionsJob Title: SAST Security EngineerLocation: Richfield MN - Day1 OnsiteMandatory skills - checkmarx, Nexus, ci/cd integrationBasic QualificationsDirect full-time information security, static code review, remediation, testing, software development, or software engineering.Familiarity with popular web application languages and platforms. For example, JavaScript, HTML, .NET, Java Groovy, and Python or other similar technologies.Knowledge of secure development of web applications and mobile applicationsHands on experience leading technical integration-heavy in modern security tools, especially; Checkmarx SAST, CheckmarxOne, NexusIQ, and/or Blackduck, Veracode, Snyk.Experienced in conducting end-to-end static analysis, using at least one commercial, application scanning tool.Experienced in application onboarding, triaging, remediation with application teams and verifying proposed findings.Hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment - including a deep understanding of CI/CD.Organize, maintain, and report on project workflows, statuses, and technical tasks.Identify, facilitate, and track on-going process and automation-based process improvements.Ability to quickly adapt to new technologies, tools and techniquesAbility to perform in a fast paced, dynamic work environment and meet aggressive deadlinesAbility to work with technical and non-technical team membersStrong technical writing and verbal communication skillsExperience Qualifications5+ years of experience SAST and SCA security tools; Checkmarx and CheckmarxOne, and Nexus IQ5+ year of experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilities5+ years of experience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.5+ years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.3+ years of recent, hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment - including a deep understanding of CI/CD.3+ years, with expert-level skills, in SDLC workflow management tools like Jira, Confluence, SharePoint or similar.SRI Tech Solutions is an