As a Secure Coding Domain Expert, you will be responsible for maintaining and enhancing the organization's application security posture by advocating for secure software development practices across development teams. Your role includes defining, maintaining, and continuously improving secure coding standards, guidelines, and best practices across various technologies. You will analyze, triage, and prioritize security findings generated by Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools. Working with security tools such as Fortify, Nexus Lifecycle, or similar platforms, you will identify vulnerabilities, assess risks, and recommend appropriate remediation measures. Additionally, you will support developers in understanding security findings, investigating root causes, and implementing effective fixes in application code.

• Improve security tooling by fine-tuning detection rules, reducing false positives, enhancing finding quality, and increasing the effectiveness of security scans.
• Contribute to internally developed security tools, including repository scanning solutions, and help enhance automation within the secure development lifecycle.
• Research emerging application security risks, including AI-driven attacks and agentic development, while sharing knowledge and assisting development teams in adopting more secure practices.