Our client is looking for someone that has a software developer background in Java and understands secure coding practices. This individual will be working with our client's software development teams in the adoption of performing source code scanning for vulnerabilities and resolving any code issues. The individual will need experience in at least one source code scanning technology with the aptitude to apply that knowledge to solution utilized by our client.
Responsibilities:
· Champion adoption of static code scanning
· Hold on-boarding sessions for areas starting to use static code scanning
· Develop coaches in the areas to field questions
· Assist with troubleshooting and consulting as needed serving as 3rd level support for static code scanning usage
· Document available training, identify any training gaps and work to fill gaps
· Populate wiki with user guidance documentation (e.g. software setup, steps to perform a build, examples of various results & their explanations, FAQs section, where to go for help, available training, etc.)
· Document static code scanning environment requirements of projects
· Communicate environment/tool issues to all interested parties
Skills preferred:
Strong customer service and results focus
Knowledge of Secure Coding Practices
Experience with at least one source code scanning technology (e.g. AppScan,
CodePro, Klocwork, YASCA, Fortify)
Effective communication skills, both oral & written