Application Security Engineer

Jobtailor; Minnesota; On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking an experienced Application Security professional to strengthen our code-level security across CI/CD pipelines, with emphasis on SAST, SCA, and vulnerability detection in Java-based environments.

The role covers expanding DAST capabilities, vulnerability triage in ServiceNow, and AI-driven security initiatives, including automation and LLM-driven scanning techniques, while supporting cloud and on-prem infrastructure with Docker-based tooling.

Qualifications

• 5+ years of hands-on AppSec experience focusing on SAST, SCA, and vulnerability detection at code level.
• Experience integrating and managing security tools within CI/CD pipelines (Jenkins required).
• Experience configuring, tuning, or maintaining application security scanning tools.
• 2+ years working with Java-based applications, automation, or development environments.
• Knowledge of cloud/containerization (Docker) supporting security tooling environments.
• Strong understanding of how vulnerabilities are identified in application code and secure SDLC practices.

Responsibilities

• Configure and maintain application security tools within CI/CD pipelines in a Jenkins-heavy environment.
• Perform application security scanning using SAST and SCA methodologies.
• Support the development and expansion of dynamic application security testing (DAST) capabilities.
• Analyze, triage, and track vulnerabilities with proper documentation and workflow management in ServiceNow.
• Contribute to AI-focused application security initiatives, including automation and LLM-driven scanning techniques.
• Maintain and enhance internal Java-based automation tools supporting security processes.
• Support infrastructure components across cloud, on-prem, and containerized environments (Docker).

Skills

SAST

SCA

Vulnerability detection

CI/CD integration

Jenkins

Java-based apps

Docker

Secure SDLC

Automation tooling

Tools

Jenkins

Job description

• Configure and maintain application security tools within CI/CD pipelines (Jenkins-heavy environment)
• Perform application security scanning using SAST and software composition analysis (SCA) methodologies
• Support the development and expansion of dynamic application security testing (DAST) capabilities
• Analyze, triage, and track vulnerabilities, ensuring proper documentation and workflow management in ServiceNow
• Contribute to AI-focused application security initiatives, including use of automation and LLM-driven scanning techniques
• Maintain and enhance internal Java-based automation tools supporting security processes
• Support infrastructure components across cloud, on-prem, and containerized (Docker) environments

Requirements

• 5+ years of hands-on Application Security (AppSec) experience focused on SAST, SCA (open-source risk), and vulnerability detection at the code level
• Strong experience integrating and managing security tools within CI/CD pipelines (Jenkins required)
• Experience configuring, tuning, or maintaining application security scanning tools (not just consuming outputs)
• 2+ years of experience working with Java-based applications, automation, or development environments
• Working knowledge of cloud and/or containerization technologies (Docker) supporting security tooling environments
• Strong understanding of how vulnerabilities are identified within application code and secure SDLC practices