Job Title: Application Security Engineer
Location:
WFH USA Texas Houston
Rate range ***/hr to ***/hr
Years of Experience:
7- 10 Years
Job Summary
We are seeking an experienced Application Security Engineer to join our team. The ideal candidate will have a strong background in application security concepts and practices, with a focus on implementing and maintaining secure server baselines, conducting security assessments, and managing identity and access controls. This role requires a proactive approach to identifying and mitigating security risks across various platforms and applications.
Responsibilities
Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with
CIS Benchmarks
and security standards.
Conduct
Static Application Security Testing (SAST) ,
Dynamic Application Security Testing (DAST) , and
Software Composition Analysis (SCA)
assessments for in house and third party applications.
Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
Manage
Identity
Access Management (IAM) , including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
Investigate and respond to server and application security incidents.
Integrate security controls into
Continuous Integration/Continuous Deployment (CI/CD)
pipelines, including container scanning and secrets management.
Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the
Security Information and Event Management (SIEM)
system.
Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
Support patch management, security reviews, threat modeling, and secure release processes.
Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.
Mandatory Skills
Strong understanding of application security concepts and practices.
Experience with SAST, DAST, and SCA tools.
Proficiency in managing
AWS IAM Idaas
solutions and practices.
Experience with
CI/CD Pipeline
tools and integrating security into the development lifecycle.
Familiarity with security logging and monitoring tools, particularly SIEM.
Preferred Skills
Experience with cloud security practices and tools.
Knowledge of
Docker
security and
Kubernetes .
Familiarity with
Threat Modelling
methodologies.
Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001).
Qualifications
Bachelor's degree in Computer Science, Information Technology, or a related field.
7 10 years of experience in application security or related fields.
Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Application Security Engineer (CASE) are preferred.
Strong analytical and problem solving skills.
Excellent communication and collaboration skills.
If you are passionate about application security and meet the qualifications outlined above, we encourage you to apply for this exciting opportunity.