Application security analysis
Create a small test repository with an intentionally vulnerable example and a safe counterpart. Write a CodeQL query, inspect its SARIF results and explain how you reduced false positives.
The Application Security Engineer posting emphasizes CodeQL query authoring, false-positive reduction and interpretation of SARIF findings.
Source posting