5+ years of experience SAST and SCA security tools; Checkmarx and CheckmarxOne, and Nexus IQ
5+ year of experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilities
5+ years of experience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.
5+ years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.
3+ years of recent, hands-on development experience, working with, or developing RESTful APIs in a modern, automated development environment – including a deep understanding of CI/CD.
3+ years, with expert-level skills, in SDLC workflow management tools like Jira, Conftuence, SharePoint or similar.