Application Security Engineer - Secure CI/CD & IAM Expert

Machine Learning Technologies, LLC; Houston (TX); On-site; USD 83,000 - 124,000; Full time

Job summary

We are seeking an experienced Application Security Engineer in Houston to implement secure baselines, perform SAST/DAST/SCA assessments, and manage IAM and MFA. The role involves integrating security into CI/CD, monitoring with SIEM, and guiding remediation across apps and infrastructure.

The ideal candidate will have strong security practices, experience with cloud security considerations, and a proactive approach to risk mitigation across Windows, Linux, and containerized environments.

Qualifications

• Strong understanding of application security concepts and practices.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, particularly SIEM.

Responsibilities

• Implement and maintain secure server baselines (Windows, Linux, Cloud) per CIS Benchmarks.
• Conduct SAST, DAST, and SCA assessments for in house and third party applications.
• Identify, prioritize and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and MFA.
• Investigate and respond to server and application security incidents.
• Integrate security controls into CI/CD pipelines, including container scanning and secrets management.
• Ensure security logs, EDR/HIDS telemetry, and application events are integrated with the SIEM system.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes.
• Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

Skills

Application security concepts

SAST

DAST

SCA

AWS IAM/Idaas

CI/CD security integration

SIEM

Tools

CI/CD tools

Docker security

Kubernetes security

Job description

We are seeking an experienced Application Security Engineer in Houston to implement secure baselines, perform SAST/DAST/SCA assessments, and manage IAM and MFA. The role involves integrating security into CI/CD, monitoring with SIEM, and guiding remediation across apps and infrastructure.

The ideal candidate will have strong security practices, experience with cloud security considerations, and a proactive approach to risk mitigation across Windows, Linux, and containerized environments.