Application Security Engineer - Hybrid Plano - Contract-to-Hire

Motion Recruitment; Plano (TX); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental, Orthodontia, Vision

Voluntary Life Insurance

401(k)

Job summary

Motion Recruitment Partners is seeking an Application Security Engineer for a 6–12 month contract, with potential to convert to full-time, hybrid in Plano, TX. The role involves securing cloud-native applications, managing WAF/CDN security, and integrating security into CI/CD workflows.

The candidate should have 3–4 years of related experience, strong knowledge of OWASP Top 10, and hands-on security tooling expertise. On-call rotation and Agile participation are required.

Qualifications

• Bachelor’s degree in CS/Engineering or related field with 3–4 years of relevant experience.
• Experience with secure software development and identifying vulnerabilities within application code.
• Experience analyzing application security findings and providing actionable remediation guidance.
• Hands-on experience with application security, vulnerability management, and security engineering.
• Experience securing cloud-native applications in AWS (preferred), Azure, or GCP.
• Proficiency with Python and/or Go.
• Experience with SAST, SCA, Secrets, DAST, API, and Container security tools.
• Experience tuning security scanners and reducing false positives, including OWASP Top 10 findings.
• Experience deploying, configuring, and managing Web Application Firewalls (WAFs).
• Knowledge of Policy-as-Code frameworks (OPA, HashiCorp Sentinel, or similar).
• Strong understanding of web and mobile application security, including OWASP Top 10, SSRF, RCE, deserialization, and memory corruption vulnerabilities.
• Familiarity with securing CI/CD pipelines and integrating security into development workflows.
• Understanding of API security, including OAuth, JWT, authentication, authorization, and access control.
• Understanding of CDN security, including DDoS protection, bot mitigation, rate limiting, and caching.
• Understanding of cryptographic principles, key management, and encryption best practices.

Responsibilities

• Configure, tune, and maintain application security tools to maximize accuracy, coverage, and performance.
• Establish and maintain security baselines, policies, and scanning rules aligned with organizational standards.
• Improve finding quality by reducing false positives and ensuring results reflect business risk.
• Develop and maintain risk-based prioritization models to focus remediation on high-impact vulnerabilities.
• Integrate security tool outputs into centralized vulnerability management workflows.
• Validate findings, investigate false positives, and track remediation through closure.
• Partner with engineering teams to implement security guardrails and secure development practices.
• Continuously evaluate and optimize security tooling, processes, and platform effectiveness.
• Perform targeted security assessments of high-risk applications to identify coverage gaps and critical vulnerabilities.
• Manage and optimize Web Application Firewall (WAF) and CDN security capabilities, including DDoS protection, bot mitigation, and traffic management.
• Evaluate emerging security technologies and recommend improvements to increase automation, coverage, and operational efficiency.
• Develop and maintain technical documentation, operational runbooks, and security standards.
• Support vulnerability response, remediation activities, and application security incident investigations.
• Participate in Agile development, including sprint planning, backlog refinement, estimation, stand‑ups, and retrospectives.
• Develop metrics and KPIs to measure program effectiveness and drive continuous improvement.
• Participate in a 24/7 on‑call rotation, including weekends and holidays.

Skills

Secure SDLC

Vulnerability management

Security engineering

Cloud security

Python/Go

WAF management

CI/CD security

OWASP Top 10

Education

Bachelor's degree in CS/Engineering

Tools

SAST tools

SCA tools

DAST tools

Secrets scanning

API security tooling

Container security tools

Job description

Motion Recruitment Partners is seeking an Application Security Engineer for a 6–12 month contract, with potential to convert to full-time, hybrid in Plano, TX. The role involves securing cloud-native applications, managing WAF/CDN security, and integrating security into CI/CD workflows.

The candidate should have 3–4 years of related experience, strong knowledge of OWASP Top 10, and hands-on security tooling expertise. On-call rotation and Agile participation are required.