ApplSec DevSecOps - SAST Specialist

Who We Are

At Kyndryl, we design, build, manage and modernize technology systems critical to the world every day. We focus on equity, inclusion, and community in all our efforts.

The Role

This Cybersecurity Specialist position involves protecting Kyndryl's customers' computer systems from unauthorized access and cyber threats such as malware, ransomware, and phishing. Responsibilities include implementing new cybersecurity systems and policies, monitoring threats, conducting proof-of-concepts with new cybersecurity software, and automated threat hunting.

You will also perform penetration testing, vulnerability assessments, breach response, and root cause analysis, while assisting with security solutions' creation and implementation. Additionally, the role includes working on security innovation initiatives.

Required Skills and Experience

• 3 to 6 years experience integrating Fortify Static Code Analyzer into DevSecOps pipelines
• Configure repo paths, scan profiles, and schedule scans in CI/CD pipelines
• Validate scan results, triage false positives, and tag severity levels
• Share scan reports and remediation guidance with development teams
• Track remediation within SLA and flag violations
• Monitor scan performance and coordinate fixes with OEM
• Maintain remediation dashboards and support knowledge sharing on secure coding

Preferred Skills and Experience

• Experience with MicroFocus Web Inspect, Burpsuite, Postman, SOAP UI, and open source mobile and web app penetration testing tools

Who You Are

Customer-focused with a growth mindset, inclusive, open, and continually developing professionally and personally.

What You Can Expect

Opportunities for professional growth, certifications, volunteering, and benefits supporting employee well-being at Kyndryl.