代码安全专家(外派戴姆勒)

Code Security Expert:键词：代码安全，代码安全开发，Coverity，代码漏洞发现Minimum of 6years of relevant work experience in Software development and ecurity codingAt least one of the following certifications is required CISSP, CASS, CISA, GWEB, SSLP, or ECSP，TISP in combination with TPSSE, CSSLP Proficient in backend mainstream languages such as Python, Java, and ommonly used frameworks.Extensive experience with common build tools and CI/CD tools, better amiliar with GoCD Experience with a wide variety of SAST tools, with Coverity being a mustFamiliar with common security coding vulnerabilities and solutions based on ifferent languages and frameworks.Experience in developing and implementing countermeasures to identified pplication security risksExperience in working with software developers throughout the software evelopment life-cycle (SDLC)Experience supporting security in DevOps processesWorking knowledge of NIST, Open Web Application Security Project (OWASP) nd Open Source Security Testing Methodology Manual (OSSTMM)Hands-on development experience and working knowledge of web application anguages and frameworkob FunctionMonitoring daily scan task execution, analyzing and resolving failed scan asksIntegrating new projects into the CodeScan platform or expanding or educing existing integrated projectsManual review of vulnerabilitiesDesigning and providing solutions to support application teams in esolving high-risk vulnerabilities identified by scans