Cyber Security Engineer

Job Summary

Key Responsibilities

• Implement, configure, and support OpenText Fortify application-security solutions.
• Conduct application-security assessments using Fortify SAST, SCA, DAST/WebInspect, and related technologies.
• Configure Fortify SSC and integrate Fortify with enterprise development environments and CI/CD pipelines.
• Support DevSecOps initiatives by embedding security testing throughout the SDLC.
• Configure scanning policies, security rules, application profiles, and security controls.
• Analyze scan results and perform vulnerability triage, validation, and false-positive analysis.
• Provide remediation guidance, monitor application-security risks, and prepare reports and dashboards.
• Support upgrades, migrations, integrations, configuration changes, troubleshooting, and post-production support.
• Conduct security assessments, workshops, demonstrations, and knowledge-transfer sessions.
• Develop HLD/LLD documents, implementation plans, configuration guides, and operational documentation.

Required Experience

• At least 5 years of experience in cybersecurity, application security, security engineering, or security consulting.
• Strong hands-on experience implementing and supporting OpenText Fortify solutions.
• Experience with Fortify SAST, SCA, SSC, and DAST/WebInspect.
• Strong understanding of application-security testing and vulnerability management.
• Experience integrating security tools into CI/CD and DevOps environments.
• Experience working with development and DevOps teams to remediate security vulnerabilities.
• Experience in enterprise application-security environments.
• Professional Services or consulting experience is strongly preferred.
• Strong customer-facing, communication, presentation, and stakeholder-management skills.
• Ability to independently troubleshoot technical issues and provide security recommendations.

Technical Skills

• OpenText Fortify, Fortify SAST, Fortify SCA, Fortify SSC, and Fortify DAST/WebInspect.
• Application security, vulnerability assessment and management, SAST, DAST, SCA, and secure SDLC.
• DevSecOps, CI/CD pipeline security integration, REST APIs, automation and scripting.
• Application-security architecture, OWASP Top 10, web application security, and API security.
• Risk assessment, vulnerability prioritization, remediation, mitigation, security analysis, and reporting.
• Jenkins, GitLab CI/CD, Azure DevOps, GitHub Actions, and Git are listed as integration and DevOps skills.

Preferred Certifications

• OpenText Fortify Certification, Certified Ethical Hacker, OSCP, CISSP, CSSLP, GIAC, or relevant DevSecOps and application-security certifications are preferred.