Application Security Engineer

KellyMitchell Group; Fort Worth (TX); In loco; USD 43.000 - 62.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESOP

401K

Descrizione del lavoro

KellyMitchell is seeking an Application Security Engineer for a contract role in Fort Worth, TX. You will own and tune application security tooling, including GitHub code scanning, SAST, SCA, DAST, and API security, working with development teams to remediate vulnerabilities.

You will build security into CI/CD pipelines with Python/Java/PowerShell automation and define security controls across the software lifecycle. This role requires onsite presence 3 days weekly.

Competenze

• Bachelor's degree or equivalent in CS/Cybersecurity.
• 3+ years in cybersecurity engineering with hands-on AppSec.
• Experience configuring AppSec tools (GitHub Advanced Security/CodeQL, Checkmarx, Veracode, Snyk, Fortify, SonarQube).
• Experience integrating security into CI/CD pipelines.
• Experience collaborating with developers to remediate vulnerabilities.
• Strong communication skills; onsite in Fort Worth, TX 3 days per week.

Mansioni

• Configure, tune, maintain AppSec tools like GitHub code scanning, SAST, SCA, DAST.
• Scan apps/APIs for vulnerabilities and triage findings.
• Guide remediation with development teams.
• Integrate security checks into CI/CD pipelines.
• Develop automation in Python/Java/PowerShell.
• Define authentication/authorization and data protection controls.
• Support threat modeling and secure design reviews.
• Translate policies into scalable controls.

Conoscenze

AppSec engineering

Code scanning tools

CI/CD integration

Python automation

Vulnerability triage

Developer collaboration

Security tooling ownership

Formazione

Bachelor's degree in CS/Cybersecurity or related field

Strumenti

GitHub Advanced Security/CodeQL

Checkmarx

Veracode

Snyk

Fortify

SonarQube

Descrizione del lavoro

Our client, a major U.S. airline, is looking for an Application Security Engineer to join their Technology Risk Management team. It’s a contract role running through the end of the year with a strong likelihood of extension, based in Fort Worth, TX, and the role requires working onsite 3 days a week. This person will configure, tune, and maintain application security tools including GitHub code scanning, SAST, SCA, DAST, secret scanning, and API security tools. They’ll scan applications and APIs for vulnerabilities, triage findings, work directly with developers on remediation, build security checks into CI/CD pipelines, and write Python, Java, or PowerShell automation to integrate security tools and streamline vulnerability management. We’re looking for someone who has hands‑on experience owning and tuning application security scanning tools and working with development teams to fix vulnerabilities in code, which is the key differentiator for this role. Experience limited to SOC monitoring or incident response, GRC or audit work, infrastructure or network vulnerability scanning and patching, or software development without ownership of security tooling is not a fit. Candidates will complete a technical assessment covering coding and application security as part of the process.

This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

Core Responsibilities

• Configure, tune, and maintain application security tools including GitHub code scanning, SAST, SCA, DAST, secret scanning, and API security solutions
• Scan applications and APIs for security vulnerabilities and triage findings, including reducing false positives
• Partner with development teams to explain vulnerabilities and guide remediation
• Integrate security scanning and controls into CI/CD pipelines
• Develop Python, Java, or PowerShell automation to integrate security tools and streamline vulnerability management processes
• Define and implement application and API security requirements, including authentication, authorization, and data protection controls
• Support threat modeling, secure design reviews, and secure coding standards across the software development lifecycle
• Translate application security policies and standards into scalable controls, processes, and developer-focused solutions

Required Skills/Experience (Must-Haves)

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
• 3+ years of experience in cybersecurity engineering, with hands‑on application security experience
• Hands‑on experience configuring and tuning application security scanning tools such as GitHub Advanced Security/CodeQL, Checkmarx, Veracode, Snyk, Fortify, or SonarQube
• Working knowledge of SAST, SCA, DAST, and secret scanning, and what each type of tool detects
• Experience integrating security tools into CI/CD pipelines
• Experience using Python, Java, or PowerShell to build security automation or tool integrations
• Experience working directly with developers to remediate vulnerabilities
• Experience with vulnerability management processes
• Strong written and verbal communication skills
• Able to work onsite in Fort Worth, TX 3 days a week

Preferred Skills/Experience (Nice-to-Haves)

• Prior software development experience before moving into security
• API security testing experience
• Threat modeling and secure design review experience
• Cloud security experience with AWS, Azure, or Google Cloud
• Experience with Tenable or similar vulnerability management tools
• Familiarity with compliance standards such as PCI-DSS, ISO 27001, or GDPR
• Application security certifications such as CSSLP, GWEB, GWAPT, OSWE, or OSCP
• Airline or travel industry experience
• Explains vulnerabilities clearly to developers and works with them to get fixes done
• Balances security requirements with development timelines and business needs
• Takes ownership of tools and processes rather than just reporting findings
• Looks for opportunities to automate repetitive security work
• Collaborative in a global team environment
• Organized and clear in documentation and communication
• Location: Fort Worth, TX (onsite 3 days a week)
• Contract length: Through end of year, with strong likelihood of extension
• Pay Range: The approximate pay range for this position is between $31.00 and $45.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy