RemoteLeaf Logo
Log in Sign up

Application Security Engineer

13 hours, 38 minutes ago
Anywhere
Lead
Application Security Engineer
Cybersecurity
CI/CD DevSecOps Java Kubernetes .NET New Relic Node.js OWASP Python Ruby SonarQube Splunk Spring Boot
Apply Now
Ardent MC

Ardent MC

ArdentMC provides digital transformation, data science, and location intelligence solutions for security and defense missions, offering innovative IT services and expertise in situational awareness and geographic visualization.

Construction & Engineering
51-200
Founded 2006
View All Jobs

Description

  • Perform application security testing and vulnerability assessments across web applications, APIs, services, containers, dependencies, and delivery environments.
  • Support and maintain automated security scanning throughout development, CI/CD, release, and runtime activities.
  • Document, triage, track, validate, and close security findings, including remediation evidence and status.
  • Guide development teams on secure coding, scan results, vulnerable dependencies, policy violations, and remediation approaches.
  • Integrate security tools and controls into CI/CD pipelines, including automated gates, policy enforcement, reporting, and API-based workflows.
  • Develop proof-of-concept applications and reusable secure reference implementations for authentication, authorization, logging, secrets handling, API security, containerization, and secure CI/CD.
  • Build utility applications, scripts, dashboards, integrations, and automation to improve vulnerability management and DevSecOps operations.
  • Monitor alignment with application security standards and support Zero Trust, NIST, CISA, and CIS security initiatives.
  • Collect assessment data, scan results, remediation evidence, and operational metrics for continuous-monitoring and security-improvement reporting.

Requirements

  • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
  • At least 4 years of professional IT experience plus 4 years supporting application security, cybersecurity, DevSecOps, or related work.
  • Advanced knowledge of application security technologies, specialized applications, and operational environments.
  • Experience with application security testing, vulnerability assessment, secure coding, and remediation guidance.
  • Experience with SAST, DAST, SCA, container scanning, dependency security, and vulnerability-management workflows.
  • Experience integrating security tools and controls into CI/CD pipelines and DevSecOps workflows.
  • Experience developing proof-of-concept applications, secure reference implementations, utilities, scripts, dashboards, or API-based integrations.
  • Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices.
  • Experience collaborating with development, security, platform, and operations teams.
  • Ability to review results from tools such as SonarQube, Nexus IQ, Checkmarx, and Twistlock; analyze CVEs and CVSS scores; and support dependency-blocking workflows.
  • Experience with Java/Spring Boot, Node.js, Python, Ruby, or .NET; Kubernetes/container security; Splunk, New Relic, and Harness or similar CI/CD platforms is preferred.
  • Willingness to undergo a government-issued background investigation.

Benefits

  • Remote position.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Radicle Health

Application Security Engineer (Contractor)

Radicle Health 11-50 Internet Software & Services

Radicle Health is seeking a remote Application Security Engineer on a 12-month contract to embed scalable security practices and tooling across its 10 human-services SaaS platforms.

Anywhere Contract Mid Level Application Security Engineer
$129k-$129k
AWS Cybersecurity HIPAA OWASP Penetration Testing
13 hours, 8 minutes ago
ClearCapital.com,

Senior Application Security Engineer

ClearCapital.com, 1-10 Real Estate

As a Sr. Application Security Engineer, strengthen the security of application services, connected systems, and AI-enabled products by identifying vulnerabilities and driving secure development practices across the software lifecycle.

United States Full-time Senior Application Security Engineer
$111k-$144k
AWS C++ Java JavaScript Penetration Testing PHP PowerShell Python Ruby
2 days, 13 hours ago
HITCONTRACT

Senior DevSecOps and Vulnerability Management Engineer

HITCONTRACT 11-50 Professional Services

Join an international IT company as a Senior DevSecOps and Vulnerability Management Engineer to strengthen CI/CD, cloud, and vulnerability security for a US public-sector SaaS platform across a diverse multi-product estate.

Lithuania Poland Contract Lead Application Security Engineer
$89k-$98k
Argo CD AWS Azure C# CI/CD Datadog DevSecOps GitHub Actions Groovy Helm Java Jenkins Kubernetes Node.js PHP Power BI Ruby TypeScript
2 days, 13 hours ago
OneStream Software

Application Security Engineer

OneStream Software 1001-5000 Internet Software & Services

OneStream is hiring a remote Application Security Engineer to strengthen the security of its modern Finance platform by embedding practical application security throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$114k-$148k
Burp Suite C# CI/CD DevSecOps .NET PowerShell Python
5 days, 10 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers