& Remediation Tooling: Direct experience with at least two of Snyk, Trivy, Grype, Dependabot, Renovate, Semgrep SCA, OSV-Scanner..., or Dependency-Track. Reachability Analysis: Exposure to reachability tooling (e.g., Semgrep) to prioritize fixes by exploitability...
or Semgrep. Hands-on Android and iOS penetration testing experience using tools such as MobSF, Frida, Objection, Jadx, apktool...
following: SCA (e.g., Apiiro, Nexus IQ, Snyk) SAST (e.g., SonarQube, Semgrep) Secret Scanning DAST / API...
management familiarity, and comfort with vulnerability/misconfig scanning in CI (SAST, IaC, secret detection, Semgrep/KICS, Trivy...
, Semgrep, Checkov/tfsec) into active CI/CD pipelines without slowing developer velocity. Cloud Security:** Practical expertise...
Docker or comparable container platforms GitLab CI/CD and GitLab runners SonarQube and Semgrep Pay Information Full...
analysis, such as writing Semgrep or CodeQL rules. Experience in vulnerability research, penetration testing, or exploit...
Application Security Testing (DAST), and other application security software (currently Snyk, with possible future use of Semgrep.../DAST tools (Snyk required;Semgrep preferred). Knowledge of OWASP Top 10, CWE, and secure development practices...
-based chains;Sui's object and capability model is a plus. Static or dynamic program analysis: CodeQL, Semgrep, taint...
(Semgrep, CodeQL, or similar) Fintech, payments, or other environments under serious third-party security review (PCI DSS...