Static Code Analysis

Static Code Analysis Engineer Jobs

7 jobs found

28d ago

Application Security Engineer

Wawa, Inc. Media, PA

Media, PA

28d ago

Full time Application Security Container Security Information Security

Apply Now

Job Description

Wawa is hiring an Application Security Engineer to run day-to-day application security operations and strengthen secure software practices across the SDLC.

Responsibilities

Collaborate with developers and product owners to apply application security best practices throughout the software development lifecycle
Research and communicate current and emerging application security threats plus recommended solutions
Maintain and iterate on secure coding practices, policies, standards, and procedures
Test applications for security threats and vulnerabilities
Support application security vulnerability management
Create and deliver security presentations for technical and non-technical internal audiences
Find security design gaps in existing and proposed applications and recommend enhancements
Identify gaps and inefficiencies in the Application Security Program and propose improvements
Participate in and support application security reviews, penetration tests, and threat modeling
Contribute to the direction of internal security-focused programs
Assist with development of metrics and a reporting framework to measure program effectiveness
Support technology security policies and standards and help ensure they apply to technology architectures
Assist in ensuring ongoing compliance with regulatory obligations and internal policies/standards
Provide support to the Technology Security Incident Response team during cyber incidents
Maintain internal networks across information security, information technology, and development to align on initiatives
Maintain external networks with industry peers, ecosystem partners, vendors, and other parties to track common trends, findings, and risks
Act as a technical resource for business teams and IT to plan, implement, and support new and existing software
Support IT audit and assessment activities, including annual PCI audit and IT general controls review
Provide application security guidance for IT and business-related projects as required, and participate in security-related projects
Work with business units to support application security engineering requirements and advocate secure development best practices

Requirements

Minimum 2 years of experience in a complex technology environment in the application security engineering field
Proven experience securing custom software
Ability to work individually and in a team environment
Ability to learn on the job; ability to track task progress effectively
Experience working with teams of developers and product owners
Excellent written and verbal communication, interpersonal and collaborative skills; ability to communicate application security and risk concepts to diverse audiences
Ability to remain calm and competent in high-pressure situations
Critical thinker with strong problem-solving skills
Ability to manage multiple projects under strict timelines in a dynamic environment
Ability to engage in internal security technology and security remediation projects
Ability to understand large technology implementations spanning hundreds of physical and virtual environments
High personal integrity; ability to handle confidential matters with appropriate judgment and maturity
High initiative and dependability; ability to work with little supervision and adapt to change
Ability to participate in on-call rotation (24x7x365) for information security incidents
Advanced knowledge of containers and container security
Solid knowledge of cloud technology and security
Solid knowledge of Java; basic knowledge of Golang
Basic knowledge of React and React Native
Experience reading and writing enterprise software
Experience preventing and remediating software security flaws in enterprise software
Up-to-date knowledge of common security weaknesses and how to prevent/remediate
Advanced knowledge of OWASP guidance
Solid knowledge of web-related protocols: TCP/IP, HTTP, HTTPS, REST, etc.
Understanding of relevant legal/regulatory requirements such as Payment Card Industry Data Security Standard
Degree in computer science preferred or equivalent professional experience
Professional security management certification preferred (examples listed): CISSP, CISM, GDSA, CSSLP, CEH, etc.
Solid knowledge of security management frameworks such as Critical Security Controls, NIST 800-53, and Cybersecurity Framework
Significant knowledge of application security concepts/technologies including SAST, DAST, SCA, IaC, cryptography, authn/authz, API security, etc.
Strong understanding of cloud, application security, and software engineering principles
Experience with scripting/automation (examples listed): Python, PowerShell, Unix shell, JavaScript, TypeScript, etc.
Proven experience and strong understanding of DevSecOps and SAFE Agile working methodologies
Ability to maintain a positive attitude by committing to new ideas, being enthusiastic, and being helpful and considerate across the organization

Technologies

container security
Java
Golang
React
React Native
OWASP guidance
TCP/IP
HTTP
HTTPS
REST
Payment Card Industry Data Security Standard
Critical Security Controls
NIST 800-53
Cybersecurity Framework
SAST
DAST
SCA
IaC
cryptography
authn/authz
API security
Python
PowerShell
Unix shell
JavaScript
TypeScript
DevSecOps
SAFE Agile
PCI audit
IT general controls review

Location and Experience

Location: Media, PA (onsite)
Minimum experience: 2 years
Education: Degree in computer science (preferred) or equivalent professional experience

View full job page →

28d ago

Cybersecurity Engineer

Delta Defense, LLC West Bend, WI

West Bend, WI

28d ago

$100k - $125k/yr Full time Ai Security Api Security Application Security

Apply Now

Job Description

Delta Defense, LLC is building a modern security engineering program that spans product engineering, cloud infrastructure, and analytics teams. In this role, you will help design and evolve security controls across application and web/API security, offensive security, AI security and governance, incident response and detection, vulnerability management, and security automation.

This onsite position is based in West Bend, WI, and the target salary range is USD 100,000 - 125,000 per year. Delta Defense is seeking a cybersecurity engineer with 3+ years of experience to partner across Engineering, DevOps, Infrastructure, and Product.

Responsibilities

Lead application security throughout the software development lifecycle by partnering with Engineering and DevOps to integrate security into design, development, testing, and deployment.
Conduct threat modeling, secure design reviews, and code reviews, and implement automated SAST, DAST, SCA, and secrets detection in CI/CD pipelines.
Design, implement, and continuously improve web application and API security controls across the enterprise.
Develop and tune WAF policies, perform API security assessments, identify business logic vulnerabilities, and define secure-by-design standards that reduce risk without unnecessarily slowing developer velocity.
Plan and execute penetration testing against web applications, APIs, cloud environments, and supporting infrastructure.
Validate vulnerabilities through manual testing, prioritize findings by business risk, and work with engineering teams to ensure timely remediation and measurable risk reduction.
Develop and enforce security controls governing enterprise AI platforms and internally developed AI capabilities.
Establish policies for data classification, model usage, access controls, audit logging, and secure AI integrations to support responsible adoption.
Perform security assessments of Retrieval-Augmented Generation (RAG), agentic AI systems, MCP integrations, and large language model applications.
Identify and mitigate AI and application risks including prompt injection, indirect prompt injection, insecure tool use, excessive agent permissions, model abuse, and data leakage using guidance such as OWASP LLM Top 10 and MITRE ATLAS.
Support security incident investigation and response, including threat analysis, digital forensics, containment, eradication, and root cause analysis.
Operate a risk-based vulnerability management program that prioritizes remediation based on exploitability, business impact, and threat intelligence rather than scanner severity alone.
Measure remediation effectiveness, track risk reduction, and ensure alignment to frameworks including NIST CSF, CIS Controls, OWASP, PCI DSS, and organizational security standards.
Help maintain secure cloud environments across AWS, Google Cloud, and DigitalOcean.
Design and implement cloud security architecture covering IAM, Kubernetes security, container security, Infrastructure-as-Code security scanning, secrets management, workload protection, and Zero Trust network controls.
Build security automation to improve operational efficiency and security outcomes using scripting, APIs, Infrastructure as Code, and AI-assisted workflows.
Develop integrations between security platforms, automate repetitive security processes, and use AI responsibly to enhance detection, investigation, and response while maintaining governance and oversight.
Serve as a trusted technical advisor across Engineering, Infrastructure, and Product teams by providing security guidance, mentoring engineers, evaluating emerging technologies, and translating security risks into practical engineering solutions.
Continuously research evolving threats, techniques, and defensive capabilities to improve the organization’s security posture.

Requirements

Deep cybersecurity engineering capability across application security, cloud and infrastructure security, data platform security, detection engineering, and vulnerability management, with practical experience securing modern cloud-first environments and large-scale SaaS and data platforms.
Hands-on application security experience with SAST, DAST, SCA, secure code review, API security, WAF tuning, threat modeling, CI/CD security, and secrets management using tools such as Doppler, Semgrep, Snyk, Burp Suite, OWASP ZAP, Cloudflare, HashiCorp Vault, or equivalents.
Proficiency in at least one programming or scripting language and the ability to read, write, and exploit code in a security context; Python, JavaScript, PHP, Golang, or Rust preferred.
Working knowledge of AI security risks and controls including prompt injection, indirect prompt injection, model abuse, data leakage, agentic workflow vulnerabilities, OWASP LLM Top 10, MITRE ATLAS, and emerging AI security tooling.
Practical cloud and infrastructure security experience across DigitalOcean, AWS, GCP, Kubernetes, IAM, CSPM, IaC scanning, container security, zero-trust/SASE architectures, and security tooling such as EDR, SIEM, CASB, SWG, DLP, IDS/IPS, and PAM.
Ability to communicate risk clearly in business terms, influence cross-functional stakeholders without direct authority, and stay decisive during active incidents while driving remediation to closure and demonstrating Delta Defense’s core values.
Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field preferred; equivalent work experience and relevant certifications may be considered in lieu of a degree.
Minimum 3 years of cybersecurity engineering experience working closely with application, software, data engineering, DevOps, cloud, infrastructure, or security operations teams.
Experience securing applications, APIs, cloud platforms, CI/CD pipelines, Kubernetes environments, data platforms, and modern engineering ecosystems using technologies such as JavaScript, PHP, PostgreSQL, Kafka, NeonDB, GitLab, Python, Snowflake, dbt, Fivetran, Databricks, Tableau, Informatica, Kestra, or related technologies.
Strong understanding of security frameworks and control models including NIST CSF, CIS Controls, PCI DSS, Cyber Defense Matrix, ISO 27001, OWASP, and MITRE ATT&CK.
Preferred certifications include CCSP, CASP+, Security+, CEH, GPEN, GWAPT, or other relevant cloud, application security, AI security, offensive security, or security engineering certifications.
Must be authorized to work in the United States without current or future sponsorship.

Benefits

Target Salary Range: $100,000 - $125,000
Eligible for Company Incentive Bonus

Working Conditions

Remote or Hybrid

Learn more & apply: https://www.deltadefense.com/careers

View full job page →

30d ago

Senior Application Security Engineer

Motion Recruitment Chicago, IL

Chicago, IL

30d ago Closed

Full time Senior Application Security Cybersecurity Tools

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Motion Recruitment is hiring a hands-on Senior Application Security Engineer to support clients on new development work in Chicago, IL (onsite). This role blends secure software practices with day-to-day engineering, with a focus on application security activities and practical delivery of security into modern development workflows.

In this position, you will work closely with client teams, perform security-focused reviews, and help strengthen software by identifying vulnerabilities early and integrating security checks into CI/CD. You will also support decision-making around third-party libraries, components, and dependencies.

What you’ll do

Partner with clients during new development efforts
Perform application-focused code reviews
Conduct SAST, DAST, and SCA scanning
Identify vulnerabilities in software and support remediation
Communicate regularly with client stakeholders
Integrate security activities into CI/CD pipelines
Evaluate third-party libraries, components, and software dependencies

What you bring

5+ years of experience as an appsec or product security or devsecops professional
Deep software development background
Experience with SCA, DAST, SAST, and code reviews
Strong communication skills
Previous experience in consulting is a plus

Technologies you’ll work with

SAST
DAST
SCA
CI/CD

Work authorization: Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

View full job page →

30d ago

Senior to Staff Application Security Engineer

Motion Recruitment Phoenix, AZ

Phoenix, AZ

30d ago Closed

Full time Senior Application Security Bug Bounty

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

This Senior to Staff Application Security Engineer role is focused on establishing an application security program from the ground up and strengthening security across APIs, web applications, and internal services. The position is onsite in Phoenix, AZ, and emphasizes proactive vulnerability discovery, secure pipeline execution, and early security involvement in new feature design.

What You Will Do

Build and develop the application security program from the ground up.
Identify vulnerabilities across APIs, web apps, and internal services before they can be exploited.
Run and create SAST and DAST pipelines to support ongoing security testing.
Manage the bug bounty program.
Participate in new feature designs early to ensure security requirements are incorporated during development rather than added later.

Key Responsibilities

You will lead the establishment of application security practices, with an emphasis on integrating testing and secure design review into development workflows. A core part of the work involves proactively finding weaknesses in services and web-facing systems, and ensuring security is addressed during feature planning.

Required Qualifications

8+ years of experience in application security (AppSec), product security, or DevSecOps.
Deep background in software development.
Experience with SCA, DAST, SAST, and code reviews.
Strong communication skills.
Previous experience building application security programs from the ground up.
Current authorization to work in the US on a full-time basis now and in the future.

Technologies and Tools

SAST, DAST, and SCA
Linux kernel security

View full job page →

1mo ago

Staff Product Security Engineer, Reviews

Okta Bellevue, WA

Bellevue, WA

1mo ago Closed

$180k - $248k/yr Full time Senior Application Security Cybersecurity Tools

This position is no longer accepting applications (closed Aug 28, 2026).

Job Description

Okta in Bellevue, WA, offering hybrid work, seeks a Staff Product Security Engineer to lead security reviews, threat modeling, and vulnerability management across Okta products, with a salary range of USD 180,000 to 247,500 per year.

Responsibilities

Conduct security reviews covering design assessments, threat modeling, and penetration testing for new features and major changes.
Perform manual secure code reviews across multiple programming languages.
Identify and mitigate vulnerabilities, providing clear guidance to engineering teams.
Lead product security incidents, assess risk, and drive remediation efforts.
Develop security tools and automation to improve vulnerability detection and assessment.
Mentor junior engineers and advise non security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Requirements

Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
Strong experience in penetration testing and secure development practices.
Deep technical background in assessing Large Language Models (LLMs) and securing AI integrated software architectures.
Proficiency in multiple programming languages (e.g., Java, Go, Python, C/C++).
Strong understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
Clear communication skills to explain risks and remediation to developers and leadership.
Ability to automate security testing using LLMs and scripting (Python, Bash, etc.).
Experience leading security incidents and risk assessments.
Experience in mobile (iOS/Android) and desktop (Windows/macOS) security testing.
Familiarity with SAST, DAST, SCA, and fuzzing tools.
Strong cryptographic knowledge and secure implementation practices.
Experience analyzing network protocols and securing traffic.
Ability to develop proof of concept exploits to demonstrate vulnerabilities.

Technologies

Java
Go
Python
C/C++
OIDC
SAML
OAuth
Large Language Models (LLMs)
Bash
SAST
DAST
SCA
Fuzzing tools

Benefits

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

The Okta Experience

Prioritizing well-being and work-life balance
Contributing to social impact initiatives
Cultivating talent and building community through collaboration

View full job page →

1mo ago

Software Engineers (Level 2 or 3)

Northrop Grumman Chantilly, VA

Chantilly, VA

1mo ago Closed

$92k - $171k/yr Full time Ansible Cloud Infrastructure Cloud Platform

This position is no longer accepting applications (closed Aug 22, 2026).

Job Description

Join Northrop Grumman in Chantilly, VA, where you will contribute to development, integration, deployment and sustainment of satellite ground software. This onsite role requires a Top Secret clearance and offers a competitive compensation range along with a comprehensive benefits package designed to support you and your family.

The role provides exposure to critical national security programs and a benefits package that includes overtime eligibility, shift differential, discretionary bonuses, annual bonuses, long term incentives, health insurance coverage, life and disability insurance, a savings plan, company paid holidays, and paid time off (PTO).

Responsibilities

Full stack development across the operating system, platform, and mission specific software layers
Developing client and server applications and services using service or object oriented architectures and message bus-based data exchange, including first of a kind capabilities
Work with languages and tools including Python, C++, Postgres, Ansible, cloud infrastructure provisioning, PKI, and static code analysis execution with remediation
Act as a self-starter capable of making decisions with the overall project budget and schedule in mind
Support Operations ground software and configurations, troubleshooting software and hardware issues affecting ground software operation
Support Acceptance Test events, including running tests
Test automation and configuration of ground segment software
Resolve and remediate software defects and implement software enhancements per customer change requests or mission needs
Provide ground software support during launch and launch rehearsal events
Assist with installation of new ground segment software in operational, development and test environments

Requirements

Bachelor’s degree (preferably Computer Science or Engineering) with 2 years of software development experience; or a Master’s degree with 0 years; experience may be substituted with four additional years of related experience
Bachelor’s degree (preferably Computer Science or Engineering) with 5 years of experience; or a Master’s degree with 3 years; or a PhD with 1 year; experience may be substituted with four additional years
Demonstrated software development experience
Proficiency in Python application development, C++, and Bash scripting
U.S. Citizenship
Active Top-Secret clearance at the time of application with the ability to obtain and maintain TS/SCI

Technologies

Python, C++, Postgres, Ansible, cloud infrastructure provisioning, PKI, Bash scripting, static code analysis

What success looks like

Be an active and integral member of your team
Channel your enthusiasm to innovate
Be part of a supportive team that develops and deploys technologies that matter to our national security
Work with agility, flexibility, and collaboration to explore creative ideas

Salary ranges

PRIMARY LEVEL SALARY RANGE: $91,800.00 - $137,600.00
SECONDARY LEVEL SALARY RANGE: $114,000.00 - $171,000.00

View full job page →

2mo ago

Software Engineer Level 1 or 2

Northrop Grumman Morrisville, NC

Morrisville, NC

2mo ago Closed

$76k - $138k/yr Full time Backend Developer Cloud Cloud Native

This position is no longer accepting applications (closed Aug 12, 2026).

Job Description

What we offer

Join a collaborative space sector team focused on satellite ground software, with a benefits package that supports you and your family. Expect comprehensive health coverage, life and disability protection, and a savings plan, along with company paid holidays and paid time off for vacation or personal business. Performance recognition comes through annual bonuses and long term incentives, with relocation assistance available if needed.

Our Aurora Software & Digital Engineering department is home to 200+ engineers, DevOps specialists, system administrators, DBAs, and network engineers. Here, engineers frequently serve as informal subject matter experts and can move into formal technical leadership roles. Career progression into higher level technical or leadership positions is strongly supported.

Responsibilities

Full stack development across operating system, platform, and mission specific software layers
Work with Go, Python, PostgreSQL, Kubernetes and Docker, AWS infrastructure provisioning, PKI, and static code analysis tooling
Operate as a self-starter capable of making decisions with project budget and schedule in mind
Develop software enabling command and control functionality for a hardware system, including sending commands, receiving acknowledgments, and cross interface integration
Create software that supports activity planning and constraint checking to achieve mission outcomes
Build visualization software for complex dynamic environments in 2D and 3D, with decision tools, contextual insights, and user friendly interfaces

Requirements

Bachelor’s degree with 0 years of development experience; 4 years of experience may be considered in lieu of degree
Bachelor’s degree with 2 years of development experience; Master’s degree with 0 years; 4 additional years of experience may be considered in lieu of degree
Active Top Secret clearance with SCI eligibility at time of application
Knowledge of Agile programs
Knowledge of design, build, and deployment of software products
Knowledge of producing software architecture documentation
Experience with Python, Go, AWS, GitLab workflows, and Docker/Kubernetes
2 years with Agile programs
2 years of experience with the design, build, and deployment of software products
2 years of experience in producing software architecture documentation
2 years of experience with Python, Go, AWS, GitLab workflows, and Docker/Kubernetes
Prior experience with development of microservice software architecture

Technologies

Go
Python
PostgreSQL
Kubernetes
Docker
AWS
PKI
GitLab
Bash
Linux
Static code analysis

Salary

Primary level range: $76,200.00 – $114,400.00 per year; Secondary level range: $91,800.00 – $137,600.00 per year.

Relocation assistance

Relocation assistance may be available.

Travel

Travel required: 10% of the time.

Clearance

Clearance required for start: Yes. Clearance type: Top Secret with SCI eligibility.

About our organization

Our Aurora Software & Digital Engineering department comprises 200+ engineers, DevOps specialists, system administrators, DBAs, and network engineers—from entry level talent to chief architects. Engineers often serve as informal subject matter experts and may assume formal technical leadership roles. Career progression into higher level technical or leadership positions is strongly supported.

View full job page →

Static Code Analysis Engineer Jobs

Application Security Engineer

Cybersecurity Engineer

Senior Application Security Engineer

Senior to Staff Application Security Engineer

Staff Product Security Engineer, Reviews

Software Engineers (Level 2 or 3)

Software Engineer Level 1 or 2

Get Static Code Analysis Engineer Jobs alerts