Sr. Engineer, Application Security - USA Remote
with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD...
with application security tooling (such as Snyk, Veracode, Checkmarx, Semgrep, or GitHub Advanced Security) integrated into CI/CD...
, Semgrep, and Gemnasium (or other SBOM based dependency scans). Software Proficiency: Expert-level experience with package...
& Remediation Tooling: Direct experience with at least two of Snyk, Trivy, Grype, Dependabot, Renovate, Semgrep SCA, OSV-Scanner..., or Dependency-Track. Reachability Analysis: Exposure to reachability tooling (e.g., Semgrep) to prioritize fixes by exploitability...
Terraform workspaces, Terraform module registry governance, Sentinel and Semgrep policy enforcement, and self-service IaC paved.../Semgrep policy maturity, shift-left guardrails, pipeline hardening, and cloud maturity model advancement. What you'll...
Terraform workspaces, Terraform module registry governance, Sentinel and Semgrep policy enforcement, and self-service IaC paved.../Semgrep policy maturity, shift-left guardrails, pipeline hardening, and cloud maturity model advancement. What you'll...
Security Testing (SAST) and Code Quality platforms (e.g., SonarQube, DeepSource, Codacy, Semgrep). Configure, calibrate... preferred) and related static analysis/linter tooling (Semgrep, Codacy, DeepSource, Checkmarx, SonarLint). Programming...
, SCA, secrets scanning, and IaC scanning (Snyk, StackHawk, Semgrep, etc). Perform threat modeling, secure design...
following: SCA (e.g., Apiiro, Nexus IQ, Snyk) SAST (e.g., SonarQube, Semgrep) Secret Scanning DAST / API...
About SemgrepSemgrep, the leader in code security for builders, empowers invention without friction. Teams catch..., flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it...
analysis tooling (Semgrep, CodeQL) Experience with detection and response data pipelines (Kafka/Pulsar, Splunk/Panther...