Senior Application Security Engineer (SCA/SAST) Job at Trimble Inc.

Security DevOps Engineer

Realize your potential by joining the leading performance-driven advertising com...

Location

Israel , Tel Aviv

Salary:

Not provided

Taboola

Expiration Date

Until further notice

Requirements

Deep DevSecOps Expertise: 5+ years of experience in a senior DevSecOps or Application/Product Security role, with a strong, working knowledge of DevSecOps principles and the modern application threat landscape (e.g., OWASP Top 10)
DevSecOps Focus: Proven ability to “shift left” security by embedding automated security controls (SAST, DAST, SCA, IAST) into CI/CD pipelines
Open Source Security & Supply Chain Mastery: Deep, hands-on experience managing and hardening open-source software dependencies
Key Focus: Expertise in utilizing Software Composition Analysis (SCA) tools (e.g., Dependency-Check, Snyk, Black Duck) to maintain an accurate Software Bill of Materials (SBOM) for all products
Vulnerability & Risk Management Pro: Proven ability to establish and own a continuous CVE tracking and remediation process
Key Focus: Expertise in risk-rating vulnerabilities based on exploitability and business impact, and driving engineering teams to remediate security risks efficiently using automation and clear Service Level Objectives (SLOs)
Audit & Compliance Automation: Proven, hands-on experience managing security audits and certification programs (e.g., SOC 2, ISO 27001) by leveraging “security as code” principles and automating evidence collection to demonstrate compliance across the pipeline
Leadership & Influence: Strong leadership skills with the ability to build consensus and partner with R&D, Platform Engineering, and IT teams to embed security practices without being a bottleneck

Job Responsibility

Build the Secure SDLC (SSDLC) Strategy: Develop, own, and execute the company’s comprehensive DevSecOps strategy, focusing on automation to manage security at scale from code check-in to production deployment
Lead Key Security Engineering Initiatives: Lead and manage security engineering programs, including: Maturing the security tools stack (e.g., implementing WAF, and automating SCA/SAST tools)
Owning the bug bounty and responsible disclosure program’s triage and remediation tracking
Enhancing the Identity and Access Management (IAM) framework through concepts like Just-In-Time (JIT) and Zero Trust principles
Operationalize CVE Tracking and Remediation: Design and implement a scalable system for discovering, tracking, and prioritizing Common Vulnerabilities and Exposures (CVEs) in third-party and custom code. Drive the engineering teams to achieve security risk remediation goals by providing clear, actionable data and automated patching mechanisms
Measure & Drive Improvement: Develop and maintain key DevSecOps metrics (e.g., Mean Time To Detect/Remediate – MTTD/MTTR, percentage of code coverage by SAST/SCA tools) to measure the effectiveness of automated controls and provide a data-driven picture of the application security posture
Embed Security Engineering: Spearhead R&D DevSecOps initiatives, partnering directly with engineering teams to select, deploy, and maintain security tools, establishing security gates and best practices throughout the product development lifecycle

What we offer

Flexibility: We offer a hybrid work schedule with 3 days in-office with an option to come in more often if desired
Work with some of the biggest names: We work with some of the biggest names in the business. Our publisher partners include Yahoo, Conde Nast, Fox Sports, NBCU, ESPN, CBS, and E! Online. Our advertiser clients include Wells Fargo, Honda, Pinterest, Expedia and Honda

DevOps Engineer

Realize your potential by joining the leading performance-driven advertising com...

Location

Israel , Tel Aviv

Salary:

Not provided

Taboola

Expiration Date

Until further notice

Requirements

Deep DevSecOps Expertise: 5+ years of experience in a senior DevSecOps or Application/Product Security role, with a strong, working knowledge of DevSecOps principles and the modern application threat landscape (e.g., OWASP Top 10)
DevSecOps Focus: Proven ability to “shift left” security by embedding automated security controls (SAST, DAST, SCA, IAST) into CI/CD pipelines
Open Source Security & Supply Chain Mastery: Deep, hands-on experience managing and hardening open-source software dependencies
Key Focus: Expertise in utilizing Software Composition Analysis (SCA) tools (e.g., Dependency-Check, Snyk, Black Duck) to maintain an accurate Software Bill of Materials (SBOM) for all products
Vulnerability & Risk Management Pro: Proven ability to establish and own a continuous CVE tracking and remediation process
Key Focus: Expertise in risk-rating vulnerabilities based on exploitability and business impact, and driving engineering teams to remediate security risks efficiently using automation and clear Service Level Objectives (SLOs)
Audit & Compliance Automation: Proven, hands-on experience managing security audits and certification programs (e.g., SOC 2, ISO 27001) by leveraging “security as code” principles and automating evidence collection to demonstrate compliance across the pipeline
Leadership & Influence: Strong leadership skills with the ability to build consensus and partner with R&D, Platform Engineering, and IT teams to embed security practices without being a bottleneck

Job Responsibility

Build the Secure SDLC (SSDLC) Strategy: Develop, own, and execute the company’s comprehensive DevSecOps strategy, focusing on automation to manage security at scale from code check-in to production deployment
Lead Key Security Engineering Initiatives: Lead and manage security engineering programs, including: Maturing the security tools stack (e.g., implementing WAF, and automating SCA/SAST tools)
Owning the bug bounty and responsible disclosure program’s triage and remediation tracking
Enhancing the Identity and Access Management (IAM) framework through concepts like Just-In-Time (JIT) and Zero Trust principles
Operationalize CVE Tracking and Remediation: Design and implement a scalable system for discovering, tracking, and prioritizing Common Vulnerabilities and Exposures (CVEs) in third-party and custom code. Drive the engineering teams to achieve security risk remediation goals by providing clear, actionable data and automated patching mechanisms
Measure & Drive Improvement: Develop and maintain key DevSecOps metrics (e.g., Mean Time To Detect/Remediate – MTTD/MTTR, percentage of code coverage by SAST/SCA tools) to measure the effectiveness of automated controls and provide a data-driven picture of the application security posture
Embed Security Engineering: Spearhead R&D DevSecOps initiatives, partnering directly with engineering teams to select, deploy, and maintain security tools, establishing security gates and best practices throughout the product development lifecycle

What we offer

Flexibility: We offer a hybrid work schedule with 3 days in-office with an option to come in more often if desired
Work with some of the biggest names: We work with some of the biggest names in the business

Sre security

Realize your potential by joining the leading performance-driven advertising com...

Location

Israel , Tel Aviv

Salary:

Not provided

Taboola

Expiration Date

Until further notice

Requirements

Deep DevSecOps Expertise: 5+ years of experience in a senior DevSecOps or Application/Product Security role, with a strong, working knowledge of DevSecOps principles and the modern application threat landscape (e.g., OWASP Top 10)
DevSecOps Focus: Proven ability to “shift left” security by embedding automated security controls (SAST, DAST, SCA, IAST) into CI/CD pipelines
Open Source Security & Supply Chain Mastery: Deep, hands-on experience managing and hardening open-source software dependencies
Key Focus: Expertise in utilizing Software Composition Analysis (SCA) tools (e.g., Dependency-Check, Snyk, Black Duck) to maintain an accurate Software Bill of Materials (SBOM) for all products
Vulnerability & Risk Management Pro: Proven ability to establish and own a continuous CVE tracking and remediation process
Key Focus: Expertise in risk-rating vulnerabilities based on exploitability and business impact, and driving engineering teams to remediate security risks efficiently using automation and clear Service Level Objectives (SLOs)
Audit & Compliance Automation: Proven, hands-on experience managing security audits and certification programs (e.g., SOC 2, ISO 27001) by leveraging “security as code” principles and automating evidence collection to demonstrate compliance across the pipeline
Leadership & Influence: Strong leadership skills with the ability to build consensus and partner with R&D, Platform Engineering, and IT teams to embed security practices without being a bottleneck

Job Responsibility

Build the Secure SDLC (SSDLC) Strategy: Develop, own, and execute the company’s comprehensive DevSecOps strategy, focusing on automation to manage security at scale from code check-in to production deployment
Lead Key Security Engineering Initiatives: Lead and manage security engineering programs, including: Maturing the security tools stack (e.g., implementing WAF, and automating SCA/SAST tools)
Owning the bug bounty and responsible disclosure program’s triage and remediation tracking
Enhancing the Identity and Access Management (IAM) framework through concepts like Just-In-Time (JIT) and Zero Trust principles
Operationalize CVE Tracking and Remediation: Design and implement a scalable system for discovering, tracking, and prioritizing Common Vulnerabilities and Exposures (CVEs) in third-party and custom code. Drive the engineering teams to achieve security risk remediation goals by providing clear, actionable data and automated patching mechanisms
Measure & Drive Improvement: Develop and maintain key DevSecOps metrics (e.g., Mean Time To Detect/Remediate – MTTD/MTTR, percentage of code coverage by SAST/SCA tools) to measure the effectiveness of automated controls and provide a data-driven picture of the application security posture
Embed Security Engineering: Spearhead R&D DevSecOps initiatives, partnering directly with engineering teams to select, deploy, and maintain security tools, establishing security gates and best practices throughout the product development lifecycle

What we offer

Flexibility: We offer a hybrid work schedule with 3 days in-office with an option to come in more often if desired
Work with some of the biggest names: We work with some of the biggest names in the business. Our publisher partners include Yahoo, Conde Nast, Fox Sports, NBCU, ESPN, CBS, and E! Online. Our advertiser clients include Wells Fargo, Honda, Pinterest, Expedia and Honda

Resident Assistant

If you’re looking for a job that goes beyond the basics to deliver purpose and j...

Location

United States of America , Hillsboro

Salary:

18.00 - 20.00 USD / Hour

Leisure Care

Expiration Date

Until further notice

Requirements

Demonstrated experience in a caregiving role
Current CNA a plus!

Job Responsibility

Assists resident with activities of daily living (ADL's) and all personal care skills (bathing, dressing, grooming, toileting)
Makes appropriate observations about the resident’s condition in every interaction
Records and follows-up with changes in resident’s condition in a timely manner
Assists residents with laundry and housekeeping services as needed

What we offer

Medical, Dental and Vision
Early Wage Access (access to earned wages when needed!)
401k
10 days vacation & 1 hour Sick Leave earned for every 30 hours worked
Bereavement & Jury Duty Leave
6 Holidays
2 Float Holidays
Flexible Spending Accounts (Health and Dependent Care)
Meal Discounts
Tuition Assistance

Fulltime

Traffic Management CAD Technician

FM Conway is currently recruiting a Traffic Management CAD Technician to join ou...

Location

United Kingdom , Ipswich

Salary:

Not provided

360 Resourcing Solutions

Expiration Date

July 04, 2026

Requirements

Strong knowledge of Traffic Management operations
experience using CAD, BricsCAD and Cone 11 software
ability to read and translate blueprints and technical drawings
ability to work well under pressure, prioritise tasks effectively and have excellent attention to detail
M7 Lantra qualification is highly desirable, but not essential

Job Responsibility

Working within a team of Traffic Management development designers and Project Engineers to ensure that drawings are to a high and legal standard
Producing clear drawings, signage placement layouts and diversion route strategies
Developing safe and efficient traffic management plans for work sites and road network
Carrying out on site assessments as required
Designing sites in accordance with Chapter 8 TSM
Engaging with Project Teams & Engineers to respond effectively to working methods that require traffic Management designs that conform to a legal standard

What we offer

Career and professional development
23 days holiday plus bank holidays
Life assurance
Opportunities for internal and external training
Access to a wide range of shopping discounts through Rewarding Great People platform
Health and well-being benefits including 24-hour advice lines
Support from in-house mental health first aiders

Fulltime

Registered Nurse, CVOR

Baptist Downtown is hiring a Registered Nurse for our Cardiovascular Operating R...

Location

United States , Jacksonville

Salary:

Not provided

Baptist Health (Florida)

Expiration Date

Until further notice

Requirements

1-2 years Operating Room Nursing Experience Required
Basic Life Support (BLS) Required
Advanced Cardiac Life Support (ACLS) Required
Licensed Registered Nurse Required
Associate of Science, Nursing
Registered Nurse (RN) - State Nursing Boards
Driver's License - DMV
Basic Life Support (BLS) - AHA
Advanced Cardiac Life Support (ACLS) - AHA

Job Responsibility

Providing for patient needs as recognized through use of the nursing process
Supervision of care provided by supportive personnel and coordination of care provided by ancillary services
Including patients and significant others (SO)/families in developing an individualized plan of care
Education of patients/SO/families to their disease process and plan of care
Coordinating and preparing assigned operating room/case
Assessment of patient care needs and the anticipation of needs of the case
Circulating, scrubbing, assisting on Cardiothoracic and vascular procedures

Fulltime

Pediatric Occupational Therapist

Wolfson Children's Hospital Rehab Services is hiring a Pediatric Occupational Th...

Location

United States , Jacksonville

Salary:

Not provided

Baptist Health (Florida)

Expiration Date

Until further notice

Requirements

Bachelor's degree (or higher) in Occupational Therapy Required
Licensed Occupational Therapist from FL Department of Health Required
Basic Life Support (BLS) certification from the American Heart Association Required
Pediatric Occupational Therapy in the outpatient setting is strongly preferred

Job Responsibility

Evaluates and treats patients with developmental, neurological, orthopedic, and medical diagnoses
Extensive patient/family education
Works with multidisciplinary team care

What we offer

$1,000 Sign on Bonus

Nursery Manager

Join the Kindred Family – Lead, Inspire, and Make a Difference. Are you an exper...

Location

United Kingdom , Hauxton

Salary:

34000.00 - 36000.00 GBP / Year

360 Resourcing Solutions

Expiration Date

Until further notice

Requirements

Proven experience in leading and managing a team within early years
Strong written and verbal communication skills
Excellent organisational skills and attention to detail
Outstanding customer service and time management
Full and relevant Early Years Level 3 Childcare Qualification or higher
Sound knowledge of EYFS and OFSTED guidelines

Job Responsibility

Lead the Deputy Manager, Third in Charge, and Room Leaders to ensure high standards of Early Years care and education
Maintain an organised, safe, and stimulating nursery environment
Keep accurate records and ensure procedures are followed across the nursery
Build and maintain a reputation as the nursery of choice for children and staff
Model and monitor best practice in line with regulatory guidelines
Inspire and support your team, overseeing inductions, mentoring, and ongoing development
Ensure the nursery runs efficiently, meets KPIs, budgets, and targets, and is prepared for audits and inspections
Oversee the day-to-day operations of the nursery
Lead by example, modelling good practice and creating a shared vision
Supervise, support, and allocate tasks to your team

What we offer

Birthday Off
6 Fully Paid Sick Days
Cashback Healthcare Plan
Retail Discounts
Recognition & Reward Scheme
50% Childcare Discount
24/7 Virtual GP Access
24/7 Counselling Support
Discounted Gym Membership
Personal Financial Advisor Access

Fulltime

Select Country

Senior Application Security Engineer (SCA/SAST)

Job Description

Job Responsibility

Requirements

Looking for more opportunities?