Lead Software Developer

Description:

ortify is the industry-leading provider of Application Security solutions that empower organizations to develop secure software. Fortify offers a comprehensive portfolio of application security solutions with the flexibility of testing on-premise and on-demand to cover the entire software development lifecycle. Over 80% of security breaches exploit application vulnerabilities, and at Fortify, you will be at the forefront of one of the fastest-growing segments in the security market. You will work with bright, motivated teammates to implement solutions to some of the toughest code analysis problems in the industry. We develop complex algorithms to scan the code of over 20 different programming languages. Development and testing are done using agile methodologies and techniques.

Learn more about Fortify Static Code Analyzer (SAST):

• Security from the Inside Out: https://www.youtube.com/watch?v=DGZrTtx7rLo
• Fortify Static Code Analyzer: https://software.microfocus.com/en-us/products/static-code-analysis-sast/overview

Join our experts and help us expand our security team!

A typical day in your life in this role:

• Design and implement static analysis algorithms based on recent relevant computer science research and literature.
• Develop new analysis features and add support for new languages and language features.
• Apply recent research developments from computer science literature where we can benefit from upgrading our algorithms and program representations.
• Write specifications for features as they are implemented.
• Analyse the quality of security finding results and product performance characteristics.
• Maintain the Fortify Static Code Analyzer code base using good software engineering practices.
• Collaborate with a project team of other software engineers, security researchers, and quality engineers, to develop reliable, cost-effective, and high-quality solutions.

Education and Experience Required:

• Master's degree or Ph.D. (preferred) in Computer Science or equivalent, with emphasis on programming languages, static program analysis, compilers, or software security.