Overview
Build security testing into delivery: SAST and DAST in pipelines and security regression. Attack-style testing sits with Penetration Tester.
What you'll do
- Test application and API security
- Run and tune SAST and DAST tools
- Verify fixes with engineering teams
- Add security test cases to regression packs
- Report risk clearly
- Work with Penetration Testers on findings that need deeper exploitation
What you bring
- Hands-on security testing experience
- OWASP Top 10 knowledge
- Burp Suite or OWASP ZAP
- SAST and DAST tooling such as Checkmarx, Veracode or SonarQube
- Web and API security testing
You don't need every item on this list. If most of it fits, send your CV.
Nice to have
- ISTQB Security Tester certification
- DevSecOps pipelines
- Cloud security