Application Security Engineer

Motion Recruitment; Plano (TX); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental, Orthodontia, Vision

Voluntary Life Insurance

401(k)

Job summary

Motion Recruitment Partners is seeking an Application Security Engineer for a 6–12 month contract, with potential to convert to full-time, hybrid in Plano, TX. The role involves securing cloud-native applications, managing WAF/CDN security, and integrating security into CI/CD workflows.

The candidate should have 3–4 years of related experience, strong knowledge of OWASP Top 10, and hands-on security tooling expertise. On-call rotation and Agile participation are required.

Qualifications

• Bachelor’s degree in CS/Engineering or related field with 3–4 years of relevant experience.
• Experience with secure software development and identifying vulnerabilities within application code.
• Experience analyzing application security findings and providing actionable remediation guidance.
• Hands-on experience with application security, vulnerability management, and security engineering.
• Experience securing cloud-native applications in AWS (preferred), Azure, or GCP.
• Proficiency with Python and/or Go.
• Experience with SAST, SCA, Secrets, DAST, API, and Container security tools.
• Experience tuning security scanners and reducing false positives, including OWASP Top 10 findings.
• Experience deploying, configuring, and managing Web Application Firewalls (WAFs).
• Knowledge of Policy-as-Code frameworks (OPA, HashiCorp Sentinel, or similar).
• Strong understanding of web and mobile application security, including OWASP Top 10, SSRF, RCE, deserialization, and memory corruption vulnerabilities.
• Familiarity with securing CI/CD pipelines and integrating security into development workflows.
• Understanding of API security, including OAuth, JWT, authentication, authorization, and access control.
• Understanding of CDN security, including DDoS protection, bot mitigation, rate limiting, and caching.
• Understanding of cryptographic principles, key management, and encryption best practices.

Responsibilities

• Configure, tune, and maintain application security tools to maximize accuracy, coverage, and performance.
• Establish and maintain security baselines, policies, and scanning rules aligned with organizational standards.
• Improve finding quality by reducing false positives and ensuring results reflect business risk.
• Develop and maintain risk-based prioritization models to focus remediation on high-impact vulnerabilities.
• Integrate security tool outputs into centralized vulnerability management workflows.
• Validate findings, investigate false positives, and track remediation through closure.
• Partner with engineering teams to implement security guardrails and secure development practices.
• Continuously evaluate and optimize security tooling, processes, and platform effectiveness.
• Perform targeted security assessments of high-risk applications to identify coverage gaps and critical vulnerabilities.
• Manage and optimize Web Application Firewall (WAF) and CDN security capabilities, including DDoS protection, bot mitigation, and traffic management.
• Evaluate emerging security technologies and recommend improvements to increase automation, coverage, and operational efficiency.
• Develop and maintain technical documentation, operational runbooks, and security standards.
• Support vulnerability response, remediation activities, and application security incident investigations.
• Participate in Agile development, including sprint planning, backlog refinement, estimation, stand‑ups, and retrospectives.
• Develop metrics and KPIs to measure program effectiveness and drive continuous improvement.
• Participate in a 24/7 on‑call rotation, including weekends and holidays.

Skills

Secure SDLC

Vulnerability management

Security engineering

Cloud security

Python/Go

WAF management

CI/CD security

OWASP Top 10

Education

Bachelor's degree in CS/Engineering

Tools

SAST tools

SCA tools

DAST tools

Secrets scanning

API security tooling

Container security tools

Job description

Every day, millions of consumers around the world enjoy products from our client, a longstanding global leader in the food and beverage industry. Take your career to the next level by working with an iconic organization known for its portfolio of household brands, global reach, and continued innovation.

We are looking for an Application Security Engineer to join our team for a contract, hybrid in Plano Texas.

This is a 6-12 month contract to hire with the potential to extend or convert to Full time

Responsibilities

• Configure, tune, and maintain application security tools to maximize accuracy, coverage, and performance.


• Establish and maintain security baselines, policies, and scanning rules aligned with organizational standards.


• Improve finding quality by reducing false positives and ensuring results accurately reflect business risk.


• Develop and maintain risk-based prioritization models to focus remediation on the highest-impact vulnerabilities.


• Integrate security tool outputs into centralized vulnerability management workflows.


• Validate findings, investigate false positives, and track remediation through closure.


• Partner with engineering teams to implement security guardrails and secure development practices.


• Continuously evaluate and optimize security tooling, processes, and platform effectiveness.


• Perform targeted security assessments of high-risk applications to identify coverage gaps and critical vulnerabilities.


• Manage and optimize Web Application Firewall (WAF) and CDN security capabilities, including DDoS protection, bot mitigation, and traffic management.


• Evaluate emerging security technologies and recommend improvements to increase automation, coverage, and operational efficiency.


• Develop and maintain technical documentation, operational runbooks, and security standards.


• Support vulnerability response, remediation activities, and application security incident investigations.


• Participate in Agile development, including sprint planning, backlog refinement, estimation, stand‑ups, and retrospectives.


• Develop metrics and KPIs to measure program effectiveness and drive continuous improvement.


• Participate in a 24/7 on‑call rotation, including weekends and holidays.

Qualifications

• Bachelor’s degree in computer science, Engineering, or a related technical field, with 3-4 years of relevant professional experiences or equivalent in job experience


• Experience with secure software development and identifying vulnerabilities within application code.


• Experience analyzing application security findings and providing actionable remediation guidance.


• Hands‑on experience with application security, vulnerability management, and security engineering.


• Experience securing cloud‑native applications in AWS (preferred), Azure, or GCP.


• Proficiency with Python and/or Go.


• Experience with SAST, SCA, Secrets, DAST, API, and Container security tools.


• Experience tuning security scanners and reducing false positives, including OWASP Top 10 findings.


• Experience deploying, configuring, and managing Web Application Firewalls (WAFs).


• Knowledge of Policy‑as‑Code frameworks (OPA, HashiCorp Sentinel, or similar).


• Strong understanding of web and mobile application security, including the OWASP Top 10, SSRF, RCE, deserialization, and memory corruption vulnerabilities.


• Familiarity with securing CI/CD pipelines and integrating security into development workflows.


• Understanding of API security, including OAuth, JWT, authentication, authorization, and access control.


• Understanding of CDN security, including DDoS protection, bot mitigation, rate limiting, and caching.


• Understanding of cryptographic principles, key management, and encryption best practices.

You will receive the following benefits:

• Medical Insurance - Four medical plans to choose from for you and your family


• Dental, Orthodontia, and Vision Benefits


• Voluntary Life Insurance, Long‑Term & Short‑Term Disability Insurance


• 401(k)

Motion Recruitment Partners is an Equal Opportunity Employer, including disability/vets. All applicants must be currently authorized to work on a full‑time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre‑employment screening. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.