Application Security

Smart IT Frame LLC; Berkeley Heights (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

Smart IT Frame LLC is hiring an Application Security Engineer in Berkeley Heights, NJ. You will manage security testing tools (SAST/DAST/SCA) and integrate them into CI/CD pipelines, working with development and DevOps teams to remediate vulnerabilities.

The role requires hands-on experience with Fortify, Checkmarx, Veracode, and other tools, plus knowledge of Jenkins/GitHub Actions and scripting basics. Strong communication skills are essential.

Qualifications

• Experience in Application Security / DevSecOps.
• Hands-on with Fortify, Checkmarx, Veracode, SonarQube, Burp Suite, Snyk.
• Knowledge of Jenkins, GitLab, Azure DevOps, or GitHub Actions.
• Understanding of SAST, DAST, SCA, API and vulnerability testing.
• Basic scripting in Python, Shell, or PowerShell.
• Strong communication and troubleshooting skills.

Responsibilities

• Manage and support application security testing tools (SAST, DAST, SCA).
• Integrate security tools with CI/CD pipelines.
• Identify and remediate security vulnerabilities with development and DevOps teams.
• Analyze scan results and perform vulnerability triage.
• Support automation of security testing and reporting.
• Monitor security tools and integrations; follow Secure SDLC and OWASP Top 10.

Skills

Application Security

DevSecOps

Vulnerability triage

Security tooling

Security monitoring

Tools

Fortify

Checkmarx

Veracode

SonarQube

Burp Suite

Snyk

Jenkins

GitHub Actions

Job description

We are looking for an Application Security Engineer with experience in application security testing tools and DevSecOps.

Key Responsibilities:

• Manage and support application security testing tools such as SAST, DAST, and SCA.
• Integrate security tools with CI/CD pipelines.
• Work with development and DevOps teams to identify and remediate security vulnerabilit es.
• Analyze security scan results and perform vulnerability triage.
• Support automation of security testing and reporting.
• Monitor and maintain security tools and their integrations.
• Follow Secure SDLC, OWASP Top 10, and DevSecOps practices.

Required Skills:

• Experience in Application Security / DevSecOps.
• Handson experience with tools such as Fortify, Checkmarx, Veracode, SonarQube, Burp Suite, Snyk, or similar.
• Good knowledge of Jenkins, GitLab, Azure DevOps, or GitHub Actions.
• Understanding of SAST, DAST, SCA, API and vulnerability testing.
• Basic scripting knowledge in Python, Shell, or PowerShell.
• Good communication and troubleshooting skills.