3 days ago
Morristown, NJ, USASenior
Base Salary
$127k - $161k/yr
Responsibilities
- Lead implementation and optimization of Software Composition Analysis solutions for vulnerabilities, license compliance, and software supply chain risks.
- Establish and maintain processes for managing open-source and third-party software dependencies.
- Integrate and automate SCA and application security tools within CI/CD pipelines.
- Deploy and manage platforms including Snyk, Black Duck, Mend, Veracode, and Checkmarx ONE.
- Embed security guardrails into build pipelines using Jenkins, GitHub Actions, or GitLab CI, with desirable Artifactory integration experience.
- Analyze vulnerabilities for exploitability, reachability, and business impact; prioritize remediation based on risk.
- Validate findings to reduce false positives and improve vulnerability management.
- Develop, maintain, and enforce open-source software governance policies.
- Provide technical guidance, secure coding advice, and best practices to development teams.
Requirements
- 8+ years of experience across application security domains.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
- Strong proficiency in multiple programming languages, including Java, Python, C++, and Ruby.
- Strong understanding of third-party package ecosystems including npm for JavaScript, pip for Python, and Maven/Gradle for Java.
- Knowledge of application security best practices and standards including OWASP Top 10, SSDLC, software supply chain security principles, and vulnerability management frameworks.
- Excellent communication, analytical thinking, and problem-solving skills.
- Self-motivated with a commitment to continuous learning and staying current with evolving security threats and technologies.
- Experience with AI/LLM-focused security scanning tools and emerging application security technologies is desirable.
- Artifactory integration experience in pipelines and developer workflows is desirable.
Benefits
- Base salary range is $127,000.00-$160,550.00, excluding this benefits summary's compensation figures from benefit details.
- Benefits may include a 401(k) plan with employer match, flexible paid time off, holidays, parental leave, life and disability insurance, and medical, dental, vision, and prescription drug coverage.
- The role uses a flexible hybrid approach, with in-office presence guided by team and business needs rather than a fixed weekly schedule.
- Candidates within approximately 50 miles of a U.S. office are generally preferred.
Tech Stack
Categories
