SAST Associate Consultant · MAST

-

Minimum 5+ years of hands-on experience in Application Security, DevSecOps, and Secure SDLC initiatives.

-

Strong experience in implementing and managing Static Application Security Testing (SAST) solutions across enterprise environments.

-

Hands-on experience with at least one SAST tool such as Checkmarx, Snyk, SonarQube, Fortify SCA, or Aqua Security.

-

Experience integrating SAST solutions into CI/CD pipelines and automating security controls within development workflows.

-

Strong hands-on experience with GitHub Actions workflow development, configuration, and troubleshooting.

-

Experience with pipeline configuration, automation, and security integration using GitHub, Azure DevOps, GitLab, and Jenkins.

-

Proficiency in scripting languages such as Python or Bash for security automation and process optimization.

-

Development experience in at least one programming language such as Python, Java, C, or C#.

-

Experience working with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform (GCP).

-

Knowledge of secure coding practices, vulnerability management, and application security best practices.