Application Security Engineer

LaSalle Network; Colorado Springs (CO); Remote; USD 76,000 - 90,000; Part time

Benefits offered by this job

Benefits eligibility

Job summary

LaSalle Network is seeking two Application Security Engineers for a focused, three-month contract to remediate exposed secrets and hard-coded credentials within source code, partnering with software development teams to drive remediation.

This role requires hands-on application security experience, strong scripting skills, and the ability to contribute with limited ramp-up in a fully remote engagement.

Qualifications

• Three or more years of hands-on application security experience.
• Experience investigating and remediating exposed secrets or hard-coded credentials within source code repositories.
• Strong scripting experience in at least two of PowerShell, Bash and Python.
• Strong Git/GitHub knowledge and experience supporting engineering remediation projects.
• Ability to understand and improve existing scripts.
• Strong communication and collaboration skills, including experience working directly with software developers.
• Ability to manage competing priorities and drive findings through resolution within a short-term engagement.

Responsibilities

• Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning.
• Assess findings involving cloud credentials, API keys, private keys and other secrets to determine remediation approach.
• Use existing scripts to validate whether identified credentials remain active.
• Review, modify and improve existing validation scripts to increase efficiency; automation development is not the primary focus.
• Partner with software development teams and credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate.
• Draw on developers' application knowledge to support investigations and resolve findings.
• Track remediation progress and communicate findings, dependencies and blockers.
• Manage assigned work independently and maintain strong follow-through throughout the engagement.

Skills

Application security

PowerShell

Bash

Python

Git/GitHub

Tools

Git/GitHub

Job description

Application Security Engineer - Contract

Location: Fully remote

Employment Type: Three-month contract

Openings: Two

Compensation: $55-65 per hour

Benefits: LaSalle Network consultants are eligible to enroll in benefits. For details, visit https://www.thelasallenetwork.com/consultants/

Position Overview

LaSalle Network is partnering with a current client to hire two Application Security Engineers for a focused, three-month secrets remediation initiative. These engineers will help address an existing backlog of exposed secrets and hard-coded credentials within source code, partnering with software development teams to investigate findings and drive remediation.

This opportunity requires hands‑on application security experience, strong scripting skills and the ability to contribute with limited ramp‑up. The engagement is expected to conclude after three months, with no anticipated extension or conversion to permanent employment.

Key Responsibilities

• Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning.
• Assess findings involving cloud credentials, API keys, private keys and other secrets to determine the appropriate remediation approach.
• Use existing scripts to validate whether identified credentials remain active.
• Review, modify and improve existing validation scripts to increase efficiency; extensive automation development is not the primary focus.
• Partner with software development teams and relevant credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate.
• Draw on developers' application knowledge to support investigations and resolve findings.
• Track remediation progress and communicate findings, dependencies and blockers.
• Manage assigned work independently and maintain strong follow-through throughout the engagement.

Required Qualifications

• Three or more years of hands‑on application security experience.
• Experience investigating and remediating exposed secrets or hard‑coded credentials within source code repositories.
• Strong scripting experience in at least two of the following: PowerShell, Bash and Python.
• Strong Git/GitHub knowledge and experience supporting engineering remediation projects.
• Ability to understand and improve existing scripts.
• Strong communication and collaboration skills, including experience working directly with software developers.
• Ability to manage competing priorities and drive findings through resolution within a short‑term engagement.

Preferred Qualifications

• Experience with GitHub Advanced Security secret scanning.
• Experience investigating multiple credential types, including cloud credentials, API keys and private keys.
• Healthcare or revenue cycle management experience. Candidates from other industries are welcome.

Compensation

The anticipated hourly pay range is $55-$65 per hour, based on relevant experience and qualifications.

Interview Process

One video panel interview with the hiring manager and a technical team member, covering technical and behavioral questions.

LaSalle Network is an Equal Opportunity Employer m/f/d/v.

All assignments are at-will and their duration is subject to change.