Application Security Engineer: Cloud, IAM & CI/CD

Valiant Technologies LLC; Houston (TX); In loco; USD 85.000 - 121.000; Tempo pieno

Descrizione del lavoro

Valiant Technologies LLC in Houston, TX seeks an experienced Application Security Engineer to strengthen secure server baselines and manage IAM, CI/CD security, and incident response. You will perform SAST/DAST/SCA assessments and coordinate remediation across applications, APIs, databases, and infrastructure.

The role requires strong security knowledge, cloud and container experience, and the ability to integrate controls into development lifecycles.

Competenze

• Strong understanding of application security concepts and practices.
• Proficiency with SAST, DAST, and SCA tools.
• Experience managing AWS IAM Idaas solutions and practices.
• Experience integrating security into the development lifecycle via CI/CD.

Mansioni

• Implement and maintain secure server baselines (Windows, Linux, Cloud) per CIS Benchmarks.
• Conduct SAST, DAST, and SCA assessments for in-house and third-party apps.
• Identify, prioritize, and coordinate remediation of vulnerabilities across apps, APIs, databases, and infra.
• Manage Identity & Access Management including MFA, service accounts, API keys.
• Investigate and respond to security incidents affecting servers and apps.
• Integrate security controls into CI/CD pipelines with container scanning and secrets management.
• Ensure security logs, EDR/HIDS telemetry, and app events feed SIEM.
• Review server, app, Docker, and Kubernetes configs to mitigate risks.
• Support patching, threat modeling, and secure release processes.
• Develop security standards, procedures, and docs; provide risk-based recommendations.

Conoscenze

Application security

SAST/DAST/SCA

AWS IAM Idaas

CI/CD security

SIEM monitoring

Strumenti

SAST tools

DAST tools

SCA tools

Descrizione del lavoro

Valiant Technologies LLC in Houston, TX seeks an experienced Application Security Engineer to strengthen secure server baselines and manage IAM, CI/CD security, and incident response. You will perform SAST/DAST/SCA assessments and coordinate remediation across applications, APIs, databases, and infrastructure.

The role requires strong security knowledge, cloud and container experience, and the ability to integrate controls into development lifecycles.