Remote Mid-Level AppSec Engineer — Python & CI/CD

AgileEngine, LLC.; Warszawa; Hybrid; PLN 311,000 - 467,000; Full time

Benefits offered by this job

Professional growth

Competitive USD pay

Exciting projects

Flextime & remote

Job summary

AgileEngine, LLC. is seeking a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program.

You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams.

Qualifications

• 3-5 years of commercial experience blending software engineering and DevSecOps/AppSec.
• Solid coding proficiency in Python for automation and scripting.
• Working knowledge of CI/CD orchestration tools and vulnerability scoring frameworks.
• Ability to operate with minimal supervision on complex scripting tasks.

Responsibilities

• Write and maintain scripts to integrate security gates (SAST, DAST, SCA) into CI/CD pipelines.
• Tune security scanning tools to reduce false positives and deliver high-confidence alerts.
• Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Provide code-level remediation guidance to Java and Python development teams.

Skills

Python scripting

DevSecOps

Automation engineering

Vulnerability management

CI/CD tooling

Tools

SAST

DAST

SCA

CI/CD tools

Vulnerability scoring frameworks

Job description

AgileEngine, LLC. is seeking a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program.

You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams.