Information Assurance and Security, Advisor
SonaType/Fortify scans StackRox scans BURP Scans ASD STIG checklists Experience in creating and updating any POA&Ms...
SonaType/Fortify scans StackRox scans BURP Scans ASD STIG checklists Experience in creating and updating any POA&Ms...
and artifact management (Sonatype Nexus, various build frameworks) Release management and deployment strategies Infrastructure...
and Sonatype. Update all applicable documentation as needed as a result of your work. This includes SOPs, system diagrams...
team. The individual will review findings from various security tools (Burp Suite, Qualys, CheckMarx, Sonatype, Prsima...
with eMASS, cybersecurity compliance tools (e.g., Fortify, Sonatype), and automated security scanning tools. Experience...
in SAST tools (e.g., Fortify, Checkmarx, Veracode) and SCA tools (e.g., Sonatype, Black Duck, Snyk) Strong understanding...
containers to enable efficient scaling, and lowering costs Experience with Sonatype Nexus or similar artifact management...
, SonarQube) Experience configuring and operating software composition analysis tools (e.g., Snyk, Sonatype, Anchore, JFrog Xray...
, SonarQube) Experience configuring and operating software composition analysis tools (e.g., Snyk, Sonatype, Anchore, JFrog Xray...
teams and leadership. Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus...-on experience with SBOMs, OSS scanning tools, and vulnerability management. Experience with JFrog or Sonatype artifact repository...