SME-App Security with SAST/SCA
Core
Design, standardize, and deliver SAST/SCA capabilities for GitLab SaaS and On-Prem instances, including pipeline architecture review and secure SDLC design.
Role type
Senior IC application security engineer (SAST/SCA specialist)
Builds
Secure CI/CD pipelines and vulnerability management workflows for GitLab platforms
Domain
Cybersecurity / Application Security / DevSecOps
Required skills
SAST/SCA tooling expertise, CI/CD pipeline engineering, vulnerability scoring/prioritization, secure design fundamentals, threat modeling, developer enablement
Preferred skills
Third-party SAST/SCA tool evaluation, large-scale multi-repo rollout experience, handover documentation structuring
Technologies
GitLab (SaaS & Self-Managed), .gitlab-ci.yml, OWASP ASVS, CWE Top 25, CVSS, EPSS
Responsibilities
Assess SDLC and CI/CD pipeline architecture, define target-state SAST/SCA architecture, set scanning policies and severity thresholds, design vulnerability triage workflows, perform root-cause analysis on findings, run secure coding training, build internal documentation for self-service remediation (via careerplan.io/jobs/21fa1968-60a5-4524-b144-2d5a0a3d222a-sme-app-security-with-sastsca-at-xpt-software-australia-pty)
Seniority
Senior, hands-on IC
