Remote AppSec Engineer – DevSecOps & CI/CD

AgileEngine, LLC.; Lisboa; Híbrido; EUR 77 000 - 112 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Professional growth

Competitive USD-based pay

Exciting projects

Flextime

Resumo da oferta

AgileEngine is seeking a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program.

You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams.

Qualificações

• 3-5 years of commercial experience blending software engineering and DevSecOps/AppSec.
• Solid Python coding proficiency for automation and scripting.
• Experience with CI/CD orchestration tools and vulnerability scoring frameworks.
• Ability to work with minimal supervision on complex scripting and integration tasks.

Responsabilidades

• Write and maintain scripts to integrate security gates (SAST, DAST, SCA) into the CI/CD pipeline.
• Continuously tune and configure security scanning tools to reduce false positives and raise confidence of alerts.
• Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Provide code-level remediation guidance to Java and Python development teams.

Conhecimentos

Python

DevSecOps

Automation scripting

Ferramentas

CI/CD tooling

SAST

DAST

SCA

Descrição da oferta de emprego

AgileEngine is seeking a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program.

You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams.