DevSecOps / Application Security Engineer

For our client, we are looking for a DevSecOps / Application Security Engineer who will support the team in the area of application security, vulnerability analysis, and dependency management.

Engagement terms:

Location: 100% remote Start: ASAP (we accept candidates with a max 1-month notice period) Rate (determined individually): 130 - 155 PLN net / h Engagement: B2B (outsourcing via 1dea), full-time, long-term

Daily tasks

• Application security support at various stages of the software development process
• Implementation and maintenance of SAST and DAST solutions
• Working with Fortify and SonarQube tools
• Dependency management and vulnerability identification
• Working with Sonatype and Dependency-Track
• Supporting developers in analyzing and remediating detected vulnerabilities
• Integration of security controls with CI/CD processes
• Monitoring and improving processes related to application security
• Collaboration with developers, DevOps, and security teams

Requirements

Minimum 3 years of experience in the area of Application Security, DevSecOps, or Software Security Practical experience in SAST and DAST Knowledge and experience working with Fortify and SonarQube tools Experience in dependency and vulnerability management using Sonatype and Dependency-Track Good knowledge of Maven and dependency management processes Knowledge of best practices related to secure software development Experience in integrating security tools with CI/CD processes English language proficiency at a level that allows for free communication in a project environment

Must have: SonarQube