Senior Application Code Scanner

About the role

We are seeking a Senior Application Code Scanner to join our security team in Bangalore, KA, IN. The role focuses on performing static and dynamic application security scans using tools like Snyk and Invicti, analyzing vulnerabilities, and collaborating with development teams to remediate issues and improve overall security posture. This position is strictly limited to application scanning and security, with no access to PHI, PII, or confidential client data. The work is on-site with a 2 PM to 11 PM shift timing, requiring willingness to work overlapping US hours.

What you’ll do

• Conduct static and dynamic application security scans using tools like Snyk and Invicti
• Analyze scan results, prioritize vulnerabilities based on risk, and provide actionable remediation guidance to development teams
• Integrate security scanning tools into CI/CD pipelines to enable automated and continuous security testing
• Collaborate with developers, DevOps, and QA teams to ensure secure coding practices and timely resolution of identified issues
• Monitor and track remediation progress and validate fixes through re-scanning
• Maintain and update security scanning configurations and policies to align with evolving threat landscapes and compliance requirements
• Generate detailed reports and dashboards to communicate security findings and trends to stakeholders
• Stay current with the latest security threats, vulnerabilities, and mitigation techniques

What you’ll bring

• 9+ years of IT experience
• Hands-on experience with Snyk, Invicti, or similar security scanning tools
• Experience with programming languages such as Java, Python, React, Node, Typescript JavaScript
• Strong understanding of application security principles and OWASP Top 10
• Familiarity with CI/CD tools and automation processes (e.g., Jenkins, GitLab CI, Azure DevOps)
• Proficiency in interpreting and communicating scan results effectively
• Familiarity with reporting tools and formats (e.g., PDF, HTML, Excel, dashboards)
• Knowledge of Issue tracking tools such as JIRA, ServiceNow

Skills