Code Analyzer Developer Offline

Our client is the industry-leading provider of Application Security solutions that empower organizations to develop secure software.

Project Description

Our client is the industry-leading provider of Application Security solutions that empower organizations to develop secure software. Fortify offers a comprehensive portfolio of application security solutions with the flexibility of testing on-premise and on-demand to cover the entire software development lifecycle. Over 80% of security breaches exploit application vulnerabilities, and at Fortify, you will be at the forefront of one of the fastest growing segments in the security market. You will work with bright, motivated teammates to implement solutions to some of the toughest code analysis problems in the industry. We develop complex algorithms to scan the code of over 20 different programming languages.

Development and testing are done using agile methodologies and techniques.

Responsibilities

• Design and implement static analysis algorithms to extend and improve Fortify SCA.

• Analyze the quality of results and product performance and make appropriate improvements.

• Maintain the Fortify SCA code base using good software engineering practices.

• Work with a project team of other software engineers, security researchers and support team to develop reliable, high-quality solutions.

• Collaborate and communicate with management, local and remote development partners regarding software systems design status, project progress, and issue resolution.

Skills

Must have:

• Bachelor's degree in Computer Science or equivalent.

• Software development experience (4+ years).

• Strong knowledge of compiler development concepts (parsing, semantic analysis, translation, intermediate language).

• Experience with one of this languages: Java/.Net/C/C++/Go/JavaScript

Nice to have:

Expertise in any dynamic language: (JavaScript, Python, Ruby, etc.)

Ability to work on tasks independently

Knowledge of software security concepts

Basic knowledge of static code analysis