Cybersecurity Specialist II - Application Security

Operate and implement SAST, SCA, and DAST tools across application development workflows including integration into CI/CD pipelines.

Review, validate, and triage vulnerabilities, provide practical remediation guidance to developers, and support vulnerability tracking through remediation.

Utilize scripting and API integrations to automate scanning and reporting; conduct application and API security assessments; manage cloud vulnerability assessments using CNAPP tools like Wiz.io across AWS, Azure, and GCP.

4+ years of hands-on experience in application security, secure SDLC, or DevSecOps.

Practical experience with SAST, SCA, DAST operations, vulnerability triage, and knowledge of OWASP Top 10 and secure coding practices.

Proficiency in scripting or coding in Python, Java, or similar languages; ability to develop proof-of-concept exploits and automation tools.

Experience with CI/CD pipelines, source control platforms, security automation, and multi-cloud environment security (AWS, Azure, GCP).

Experience operating security tools within development workflows and integrating automated security checks into CI/CD.

Strong technical skills in vulnerability triage, scripting, and cloud-native security platform usage.

Comfortable collaborating with development teams to guide remediation and enhancing secure coding standards and governance.