dependency scanning, Checkmarx, Snyk, Black Duck, or Fortify. Demonstrated experience leading effective use of approved...
experience with security and compliance as code: scanning toolchains (Snyk, Checkov, Trivy), policy engines (OPA, Kyverno, Azure...
(such as Snyk and OWASP ZAP) in CI/CD pipelines so every release meets OWASP ASVS with no unresolved medium or high findings...
composition analysis (Snyk, Black Duck), DAST (OWASP ZAP), and container scanning (Trivy, Aqua), with gates that fail builds...
such as Checkmarx, BlackDuck, SonarQube, or Snyk. Exposure to AI security/adversarial testing tools such as Garak, PyRIT, Counterfit...
, Veracode, Snyk, Trivy, or similar security analysis platforms. Experience administering GitLab Container Registry, Nexus...
, Veracode, Snyk, Trivy, or similar security analysis platforms. Experience administering GitLab Container Registry, Nexus...
, Veracode, Snyk, Trivy, or similar security analysis platforms. Experience administering GitLab Container Registry, Nexus...
with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk. Comfortable reading and debugging complex codebases...
into pipelines: Fortify (SAST), OWASP ZAP (DAST), Snyk (SCA), Twistlock (container scanning), and SBOM generation. Managing GitLab...-on experience with several of security tools— Fortify, OWASP ZAP, Snyk, Twistlock/Prisma Cloud, or equivalents — including acting...