Application Security Engineer

Cloud Analytics Technologies, LLC; Houston (TX); On-site; USD 103,000 - 118,000; Full time

Job summary

Cloud Analytics Technologies, LLC is seeking an experienced Application Security Engineer in Houston, TX to strengthen our security posture across applications and infrastructure. You will implement secure baselines, conduct SAST/DAST/SCA assessments, and manage IAM controls, with a focus on integrating security into CI/CD pipelines and cloud environments.

The role requires hands-on experience with security tooling (SAST/DAST/SCA, SIEM), cloud security practices, and knowledge of

Qualifications

• Strong understanding of application security concepts.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, particularly SIEM.

Responsibilities

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
• Conduct SAST, DAST, and SCA assessments for in house and third party applications.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and MFA.
• Investigate and respond to server and application security incidents.
• Integrate security controls into CI/CD pipelines, including container scanning and secrets management.
• Ensure security logs, EDR/HIDS telemetry, and application events are integrated with SIEM.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes.
• Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

Skills

Application security concepts

CI/CD security integration

Incident response

Vulnerability remediation coordination

Tools

SAST tools

DAST tools

SCA tools

AWS IAM Idaas

CI/CD tools

SIEM

Docker security

Kubernetes security

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Application Security Engineer

Location: Houston,TX

Duration: 8 Months + Extension

Bill Rate: $75/hour (C2C)

Job Type: W-2, 1099, C2C

Client: To Be Discussed Later

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Summary:

We are seeking an experienced Application Security Engineer to join our team. The ideal candidate will have a strong background in application security concepts and practices, with a focus on implementing and maintaining secure server baselines, conducting security assessments, and managing identity and access controls. This role requires a proactive approach to identifying and mitigating security risks across various platforms and applications.

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
• Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) assessments for in house and third party applications.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
• Investigate and respond to server and application security incidents.
• Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management.
• Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the Security Information and Event Management (SIEM) system.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes.
• Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

• Strong understanding of application security concepts and practices.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, particularly SIEM.

• Experience with cloud security practices and tools.
• Knowledge of Docker security and Kubernetes.
• Familiarity with Threat Modelling methodologies.
• Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001).

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.