Security Engineer

SAST, DAST, SCA, penetration testing, vulnerability management, secrets scanning, and SIEM integration. Implements shift-left security practices and manages the security scanning pipeline.

Skills

• SAST ScanningStatic application security testing for OWASP Top 10
• Secrets ScanningDetect leaked API keys, passwords, and tokens
• Dependency ScanningCVE scanning for all project dependencies
• Scan Infrastructure
• Snyk Integration

Tool Integrations

• SnykImport vulnerability findings, deduplicate against Otto scans, route fixes to Dev

Commands

• /otto-scan
• /otto-security-status