Application Security Engineer

Ardent; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Ardent seeks an experienced security-focused engineer to perform application security testing across web apps, APIs, services, and containers. You will support automated security scanning within CI/CD pipelines and guide teams on secure coding practices.

You will help integrate DevSecOps tools, implement automated security gates, and develop proof-of-concept references to demonstrate best practices while tracking vulnerabilities through remediation and closure.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or a related field.

Responsibilities

• Perform application security testing and vulnerability assessments for web applications, APIs, services, and containers

Skills

SAST

DAST

SCA

Container scanning

CI/CD security

DevSecOps

Secure coding guidance

Education

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Tools

SonarQube

Nexus IQ

Checkmarx

Twistlock

Kubernetes

Splunk

New Relic

Harness CI/CD

Job description

Responsibilities

• Perform application security testing and vulnerability assessments for web applications, APIs, services, and containers
• Support automated security scanning and maintain security scanning tools within CI/CD pipelines
• Document, triage, track, and validate vulnerabilities through remediation and closure
• Provide technical guidance to development teams on secure coding practices and remediation
• Support DevSecOps tool integration, automation, and the implementation of automated security gates
• Develop proof-of-concept secure reference implementations and utility applications to demonstrate best practices
• Monitor compliance with application security standards and support Zero Trust, NIST, CISA, and CIS frameworks
• Collect and maintain security assessment data, scan results, and operational metrics

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or a related field
• Minimum 4 years of professional IT experience plus 4 years of experience in application security, cybersecurity, or DevSecOps
• Experience with SAST, DAST, SCA, container scanning, and dependency security
• Experience integrating security controls into CI/CD pipelines and DevSecOps workflows
• Experience developing proof-of-concept applications, scripts, or API-based integrations
• Knowledge of Zero Trust, NIST, CISA, CIS, and OWASP frameworks

Preferred Qualifications

• Experience with tools such as SonarQube, Nexus IQ, Checkmarx, and Twistlock
• Ability to build proof-of-concept applications in Java/Spring Boot, Node.js, Python, Ruby, or .NET
• Experience with Kubernetes and container security practices
• Proficiency with Splunk, New Relic, and Harness CI/CD platforms

About the Company

Ardent supports the federal government's most critical national security and defense priorities, helping protect the nation and advance technologies that keep America secure.