1 to 25 of 30 Permanent HP Fortify Jobs

Strong scripting skills in languages such as Python and Bash for automation and integration. Proficiency with static code analysis, dynamic application security testing (DAST), and vulnerability scanning tools like Fortify and Acunetix. Knowledge: In-depth understanding of security frameworks (e.g., OWASP, NIST) and best practices for mitigating vulnerabilities. Familiarity with common threat vectors and experience addressing them in development More ❯

application security principles (e.g., OWASP). Knowledge of common web vulnerabilities (e.g., SQL injection, XSS) and exploit techniques. Experience with penetration testing tools like Burp Suite, Metasploit. Familiarity with Fortify on Demand SAST and DAST tools. Strong understanding of cryptography and secure communication protocols (e.g., SSL/TLS). Excellent problem-solving and analytical skills. Strong communication skills. High More ❯

experience with code repository management, code merge and quality checks, continuous integration, and automated deployment & management using tools like Jenkins, SVN, GitHub, GitLab, Chef, Ansible, Art factory, Remedy, SonarQube, Fortify, Selenium - ITIL V4 Certification - Candidates must reside within a commutable distance. - Participation in a rotational on-call schedule for emergency page-outs is required. Preferred Skills and Qualifications: - DHS More ❯

particularly AWS Knowledge of secure coding practices, including OWASP, secrets management, and vulnerability remediation Strong understanding of networking concepts and architectures Experience working with scanning tools, such as Nessus, Fortify, and Anchore Broad infrastructure knowledge, including computer, networking, storage, and virtualization technologies Experience in developing, testing, and delivering applications within a DevSecOps framework Proficiency in programming/scripting languages More ❯

deployment Monitor/help develop scripts to monitor services to ensure everything is functioning as necessary DevOps Tool Integration Help integrate with various tools for the DevOps process (SonarQube, Fortify, Jenkins, Robot Framework/Selenium, Artifactory, etc ) Education and Experience: Required A Bachelor's degree and 9 years of relevant experience -OR- Master's degree with 7 years of More ❯

experience with code repository management, code merge and quality checks, continuous integration, and automated deployment & management using tools like Jenkins, SVN, GitHub, GitLab, Chef, Ansible, Art factory, Remedy, SonarQube, Fortify, Selenium - ITIL V4 Certification - Candidates must reside within a commutable distance. - Participation in a rotational on-call schedule for emergency page-outs is required. Preferred Skills and Qualifications: - DHS More ❯

experience with code repository management, code merge and quality checks, continuous integration, and automated deployment & management using tools like Jenkins, SVN, GitHub, GitLab, Chef, Ansible, Art factory, Remedy, SonarQube, Fortify, Selenium - ITIL V4 Certification - Candidates must reside within a commutable distance. - Participation in a rotational on-call schedule for emergency page-outs is required. Preferred Skills and Qualifications: - DHS More ❯

IAT level II requirements (Security + CE or equivalent) • Experience with automation frameworks such as Terraform, Ansible, and Chef • Experience with RedHat Linux • Experience with scanning tools (E.g. Nessus, Fortify, Anchore) • Multi-disciplined infrastructure experience with compute, networks, storage, and virtualization • Experience developing, testing & delivering applications w/in a DevSecOps framework • Background in COTS/FOSS product installation More ❯

CSS Building, deploying, and maintaining web applications in DoD or secure classified environments Utilizing GitLab CI/CD, WebLogic, and Nexus Repository for secure code delivery Implementing cybersecurity with Fortify, SonarQube, and DoD software compliance Selenium for automated UI and regression testing • Strong leadership and mentoring ability within Agile/Scrum teams • Proficient in secure SDLC practices, configuration management More ❯

including maintenance and development of charts. • Proficiency in Python to develop scripts, debug, and solve problems. • GitOps tooling (ArgoCD or FluxCD). • GitLab, GitHub. • Atlassian Suite: JIRA, Confluence, Mattermost. • Fortify, SonarQube. • Container security, OS hardening, and repository management. • Cloud native tools, including CNCF projects. • CI/CD Pipelines developing automation. • Help onboarding customer applications on the PaaS and Runtime More ❯

Skills We Value: CI/CD tools: Jira, GitLab, Jenkins, Bitbucket, Artifactory Linux (RedHat) & DevSecOps framework experience Cloud: AWS/Google Cloud Automation: Terraform, Ansible, Chef Security & scanning: Nessus, Fortify, Anchore Scripting/programming (Python, Bash, Java, Go, etc.) DoD 8570 IAT II (Security+ CE or equivalent) Requirements: U.S. citizenship Active TS/SCI with CI Poly (required Day More ❯

Active Interim Top-Secret clearance required Experience with: Java, JavaScript, HTML, CSS Version control and build pipelines using GitLab CI/CD, Nexus Repository Secure coding tools such as Fortify, SonarQube, and Selenium for automated testing Agile/Scrum development and full software development lifecycle (SDLC) Strong attention to detail, ability to collaborate across disciplines, and commitment to secure More ❯

tools e.g. Terraform, Chef, Puppet, Ansible, Azure. Practical experience with containerization and clustering technologies i.e., Docker/Kubernetes. Building automated CI/CD pipelines with tools such as SonarQube, Fortify, Selenium, etc. Be an excellent communicator, able to influence decision makers and work successfully in cross-functional teams Desirable skills include: Azure Active Directory (Identity Management, Service Principles, Security More ❯

Lambda, API Gateway, S3, DynamoDB, Step Functions, Apigee) Proficiency in AngularJS, Jenkins, Karate, Node 10, Groovy, Bash, Typescript. Knowledge of Gherkin, Cypress, Jest Tooling: Gitlab, Jenkins, CloudFormation, Maven, Docker, Fortify on Demand, SonarQube AWS DevOps Engineer certification or above. Understanding of software development lifecycle. Ability to apply secure coding practices. Experience with CI/CD pipelines. Knowledge of user More ❯

Lambda, API Gateway, S3, DynamoDB, Step Functions, Apigee) Proficiency in AngularJS, Jenkins, Karate, Node 10, Groovy, Bash, Typescript. Knowledge of Gherkin, Cypress, Jest Tooling: Gitlab, Jenkins, CloudFormation, Maven, Docker, Fortify on Demand, SonarQube AWS DevOps Engineer certification or above. Understanding of software development lifecycle. Ability to apply secure coding practices. Experience with CI/CD pipelines. Knowledge of user More ❯

Lambda, API Gateway, S3, DynamoDB, Step Functions, Apigee) Proficiency in AngularJS, Jenkins, Karate, Node 10, Groovy, Bash, Typescript. Knowledge of Gherkin, Cypress, Jest Tooling: Gitlab, Jenkins, CloudFormation, Maven, Docker, Fortify on Demand, SonarQube AWS DevOps Engineer certification or above. Understanding of software development lifecycle. Ability to apply secure coding practices. Experience with CI/CD pipelines. Knowledge of user More ❯

of various IaaS, PaaS, SaaS, etc. Experience in DevSecOps and conducting end-to-end security testing of Applications (Web, Mobile, other APIs) Experience with industry standard tools such as Fortify, Checkmarx, and practices for code reviews, static/dynamic code analysis, and vulnerability assessments Knowledge of OWASP Top 10, SANS 25, NVD, CVE, etc. Experience with code languages and More ❯

Material, Quasar) • Exposure to Linux/Windows system administration, Docker, Kubernetes, and containerized application development • Familiarity with C2 Systems, DoD STIGs, secure coding practices, and static code analysis (SonarQube, Fortify) • Knowledge of databases, performance testing, debugging, and Atlassian Suite (JIRA, Confluence, Bitbucket) • Ability to apply math/statistics to algorithms • Background in military intelligence, imagery, or strategic planning • Active More ❯

AWS cloud technologies including: EC2, PaaS (OpenShift), Lamdas, S3 buckets, Reserved Instances, etc. Understanding of code baseline management Utilization of the following: Jira, Confluence, Jenkins, Python, Gitlab, CloudFormation, Zabbix, HPFortify, ACAS, PostgreSQL, Scrum, Kanban, Terraform Knowledge of Systems, Architectural, SW Development and SW Sustainment Practices Windows Domain Administrator of user accounts and group policy objects and Linux administration Proactive self More ❯

distributed processing methods and tools, such as REST APIs, microservices, IaaS/PaaS services • Experience developing and deploying web services • Experience supporting software in a production environment • Experience with Fortify and/or SonarQube • Experience working with HPC's is a plus • Ability to work collaboratively in a team environment • Strong problem-solving skills and attention to detail • Eagerness More ❯

distributed processing methods and tools, such as REST APIs, microservices, IaaS/PaaS services • Experience developing and deploying web services • Experience supporting software in a production environment • Experience with Fortify and/or SonarQube • Experience working with HPC's is a plus • Ability to work collaboratively in a team environment • Strong problem-solving skills and attention to detail • Eagerness More ❯

risk standards to ensure compliance Required Education and Experience: Bachelor's degree in Computer Science, Information Technology, or a related field Experience with: Vulnerability testing tools (e.g., Nessus, WebInspect, Fortify, ACAS, STIG Viewer) Operating systems security (aligned with NIST, DISA STIGs, USCYBERCOM) Implementing RMF processes and NIST 800-53 controls eMASS (experience with eMASSter and STIG evaluation is a More ❯

GitOps practices • Familiarity with build ecosystems (Maven, Gradle, Jenkins) • Knowledge of container orchestration (Kubernetes, Helm) • Understanding of Agile methodologies • Familiarity with C2 systems, DoD STIGs, secure coding standards, SonarQube, Fortify • Knowledge of networking, performance testing, and debugging techniques • Experience with Atlassian Suite (JIRA, Confluence, Bitbucket) • Ability to apply mathematical/statistical concepts to algorithms • Background in military intelligence, imagery More ❯

and JWICS. In-depth understanding of network protocols, operating systems, and infrastructure. Proficiency in incident response, forensic analysis, and security incident handling techniques. Familiarity with security tools such as Fortify, Acunetix, and Prisma Cloud. Strong communication skills to effectively present technical concepts to diverse stakeholders. Certifications: CISSP or equivalent to meet DoD 8140 requirements. Clearance: Active TS/SCI More ❯

architecture • Experience with Spring Boot, Kafka, Kubernetes, Docker, GitLab, and Jenkins • Experience designing, developing, documenting, testing, and debugging enterprise application software • Experience with Unit/Integration Testing (Junit, SonarQube, Fortify) • Experience using Docker containers for development and deployment • Experience with DevOps concepts and using CI/CD pipeline technologies • Excellent interpersonal and communications skills (both spoken and written English More ❯