: SAST and DAST Consultant

Job Title: SAST and DAST Consultant

Skill Level: Advanced in SAST and DAST

Job Summary

We are seeking an experienced SAST and DAST Consultant to strengthen application security by identifying, analyzing, and mitigating security vulnerabilities across applications. The ideal candidate will have advanced expertise in Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), along with hands-on experience in security assessment, vulnerability management, and integration of security testing into the Software Development Life Cycle (SDLC) and CI/CD pipelines.

Key Responsibilities

- Perform advanced SAST assessments to identify source code vulnerabilities, insecure coding practices, and potential security weaknesses across applications.
- Conduct DAST assessments to identify runtime vulnerabilities, authentication and authorization issues, injection flaws, and other web application security risks.
- Configure, manage, and optimize SAST and DAST tools, analyze scan results, and eliminate false positives.
- Perform vulnerability triage, risk assessment, root cause analysis, and remediation validation.
- Collaborate with development, DevSecOps, QA, and security teams to recommend effective remediation strategies and secure coding practices.
- Integrate SAST and DAST tools into CI/CD pipelines to enable automated security testing and continuous security monitoring.
- Assess applications against OWASP Top 10, CWE,



and relevant application security standards.
- Prepare detailed security assessment reports, communicate findings to stakeholders, and track vulnerabilities through closure.
- Provide security guidance to development teams and support application security reviews and compliance requirements.

Required Skills and Qualifications

- Advanced hands-on expertise in Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
- Experience with security testing tools such as Checkmarx, Veracode, Fortify, SonarQube, Checkmarx One, OWASP ZAP, Burp Suite, or Invicti.
- Strong understanding of OWASP Top 10, CWE, secure coding standards, and common web application vulnerabilities.
- Knowledge of application architectures, REST APIs, authentication mechanisms, session management, and authorization controls.
- Experience with vulnerability analysis, false-positive management, remediation recommendations, and retesting.
- Familiarity with CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps and DevSecOps practices.
- Solid analytical, troubleshooting, documentation, and stakeholder communication skills.

Preferred Qualifications

- Relevant certifications such as CSSLP, GWAPT, CEH, or OSCP.
- Experience with cloud application security and containerized application environments.
- Knowledge of compliance frameworks such as ISO 27001, PCI DSS, or NIST.

📌 SAST and DAST Consultant (Bengaluru)
🏢 Saisystems Technology
📍 Bengaluru