Application Security Engineer

This Application Security Engineer will implement, and support solutions/technologies used for Static code analysis (SCA) & Static Application security testing (SAST) using industry leading tools. Lead initiatives to improve application security detection program by fine tuning tools, automating processes and improving integration of SAST, SCA and DAST tools in GitLab & Jenkins CI/CD pipeline.

Job Title: Application Security Engineer
Location: Hybrid hub position requiring 3 days in office. NC, TX, MN GA would be the preference but open to other hub locations as well. No remote option
Duration: 3 months on contract with possible extension

This Application Security Engineer will implement, and support solutions/technologies used for Static code analysis (SCA) & Static Application security testing (SAST) using industry leading tools. AppSec for AI using LLM based scanning of source code, update of AI skills, frameworks, security testing and application threat modeling. Lead initiatives to improve application security detection program by fine tuning tools, automating processes and improving integration of SAST, SCA and DAST tools in GitLab & Jenkins CI/CD pipeline. Manage and support docker containers, HELM charts, Rancher, cloud and automation with Java, Groovy and Python scripts. Look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation. Support and participate in incident response and technical investigations as needed. Ensure adherence to compliance regulations and policies.
 
Project mortar – Application Security Scanning with LLM / AI
 
Essential Skills:
AppSec detection with SAST, SCA, DAST, Gitlab & Jenkins integration
AI LLM Scanning, AI Skills & Agent security
Docker Container, HEML charts & cloud management
Automation with Java, Python & Groovy

Nice to have:
Experience triaging application security vulnerabilities, assessing severity level, false positive and establishing risk associated with the vulnerability based on environment.   
Experience working with development team on vulnerability remediation and establishing best practices for developer efficiency and security 


Top 5-10 responsibilities for this position

• AI based LLM scanning
• Vulnerability detection using SAST & SCA
• Vulnerability triage and false positive detection
• Threat assessment
• Cloud, container, and process automation

 
Required skills/technologies:

• Application Secuiry SAST, SCA, DAST  - 7 Years
• Vulnerability triage – 3 years
  Java – 3 years
• DevOps, CI/CD – 5 years
• AI Security – 2 years

 
Skills/attributes are preferred:

• Docker Container, HEML charts & cloud management

 
What does the interview process look like?
o How many rounds?   2
o Video, phone, or in person? Video
o How technical will the interviews be? Tech panel with 2-3 engineers

Please include the answers to these questions on resumes submitted :
If selected, can the contractor start in 2 weeks?
If selected, can the contractor work from US Bank hub location?
For contractor, could you provide the years of experience next to each skill listed below?
Application Secuiry - vulnerability triage
SAST, SCA, DAST
DevOps, CI/CD, Docker, HELM charts