Responsibilities
- Define, implement, and continuously improve the enterprise DAST strategy and integrate automated scanning into CI/CD pipelines.
- Select, configure, manage, and maintain DAST solutions, including authenticated scans and SSO contexts.
- Perform DAST scans on web applications, APIs, and microservices; analyze results, identify false positives, and report actionable vulnerabilities.
- Develop Python, Java, and Shell automation to expand DAST coverage, automate testing scenarios, and integrate results with Jira.
- Partner with development teams on vulnerability root causes, secure coding examples, and remediation.
- Conduct targeted security code reviews focused on architectural flaws, deserialization issues, Spring/Struts misconfigurations, and injection vulnerabilities.
- Develop secure coding standards, documentation, training materials, and hands-on workshops.
- Assist with application security incident investigations and research emerging attack techniques and Java vulnerabilities.
Requirements
- Bachelor’s degree or two or more years of work experience.
- Three or more years of experience in software engineering, application security, or a related role.
- Deep hands-on experience managing and operating enterprise DAST tools, including authenticated scans and SSO contexts.
- At least two years of professional Java software development experience, primarily with Java and frameworks such as Spring Boot and Jakarta EE/JEE.
- Expert understanding of web application architecture, HTTP protocols, RESTful APIs, and application security controls.
- Expert knowledge of the OWASP Top 10 or CWE/SANS Top 25.
- Experience integrating DAST and SAST tools into CI/CD pipelines such as Jenkins, GitLab, or Azure DevOps.
- Familiarity with securing applications on AWS, Azure, or GCP.
- Preferred qualifications include CSSLP, OSCP, or eJPT certifications; SAST, IAST, or penetration testing experience; and familiarity with Docker and Kubernetes.
Benefits
- Hybrid work arrangement with work-from-home flexibility and assigned office days set by the manager.
- Scheduled workload of 40 hours per week.
Tech Stack
Categories
About Verizon
We get you. You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. You’ll find all that here. Because we empower you. We power and empower how people live, work and play by connecting them to what brings them joy. The same is true inside our walls. We do what we love — driving innovation, creativity, and impact in the world. And wherever you go, we got your back. This is a team sport. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together— lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.