Application Security Specialist

Motion Recruitment; Greensboro (NC); Hybrid; USD 100,000 - 130,000; Full time

Job summary

Motion Recruitment is seeking a DevSecOps Engineer / Application Security Specialist in Greensboro, North Carolina. This flexible hybrid position will focus on embedding security throughout the software development lifecycle, supporting enterprise-wide security initiatives through secure CI/CD implementation, automation, and vulnerability management.

The ideal candidate will have experience with Application Security, DevSecOps and possess developer engagement skills, ensuring enhanced secure development practices while potentially growing through a contract-to-hire pathway.

Qualifications

• 3–6 years of experience in Application Security, DevSecOps, or Software Development.
• Strong hands-on Application Security experience and secure SDLC expertise.
• Experience with SAST, DAST, and cloud security.

Responsibilities

• Conduct and support Application Security assessments.
• Integrate security tooling into CI/CD pipelines.
• Provide remediation guidance to development teams.

Skills

Application Security

DevSecOps

Software Development

Security Testing

Vulnerability Management

Secure coding

API security assessment

Cloud security (AWS/Azure)

GitHub

Jira

Jenkins

Education

Bachelor's Degree in Computer Science or related field

Tools

Docker

Kubernetes

Job description

DevSecOps Engineer / Application Security Specialist

Duration: Contract-to-Hire

Join a growing Application Security team focused on embedding security throughout the software development lifecycle. This flexible hybrid opportunity supports enterprise-wide security initiatives through secure CI/CD implementation, security automation, vulnerability management, and developer enablement. The ideal candidate will bring a strong blend of hands‑on software development and Application Security experience, enabling them to work effectively with engineering teams while improving application security posture across the organization.

This role provides exposure to modern DevSecOps practices, cloud security, security automation, and enterprise‑scale application security programs. You'll work across web, mobile, API, and cloud‑enabled applications while partnering closely with developers to identify vulnerabilities, drive remediation efforts, and enhance secure development practices. This is an excellent opportunity for someone looking to make a measurable impact on security operations while positioning themselves for long‑term growth through a potential contract‑to‑hire pathway.

Contract Duration: Contract-to-Hire

Required Skills & Experience

• Bachelor's Degree in Computer Science, Cybersecurity, Information Security, Information Technology, Engineering, or equivalent experience
• 3–6 years of Application Security, DevSecOps, Software Development, Security Testing, or Vulnerability Management experience
• Strong hands‑on Application Security experience
• Secure coding and secure SDLC expertise
• Experience supporting SAST, SCA/OSCA, and DAST programs
• API security assessment experience
• Vulnerability validation and remediation guidance experience
• DevSecOps and CI/CD pipeline integration experience
• Experience working directly with software development teams
• Knowledge of REST and SOAP APIs
• Experience with GitHub, Jira, and Jenkins
• Cloud security experience (AWS and/or Azure)
• Development or scripting experience in Java, Python, Ruby, Go, Node.js, or similar languages
• Strong communication and stakeholder engagement skills
• Experience explaining vulnerabilities, risks, and remediation strategies to technical and non‑technical audiences

Desired Skills & Experience

• Sonatype Nexus IQ experience
• WhiteHat or Black Duck DAST experience
• Noname API Security experience
• NowSecure mobile security experience
• Salesforce intake workflow experience
• Docker and Kubernetes experience
• Enterprise DevSecOps pipeline integration experience
• Mobile application security testing experience
• Experience supporting large enterprise Application Security programs
• Master's Degree in a related field
• Relevant certifications such as CISSP, CSSLP, GIAC, Security+, AWS Security, or Azure Security

What You Will Be Doing

• 40% Application Security Assessments & Vulnerability Management
• 35% DevSecOps & Security Tool Integration
• 25% Developer Engagement, Remediation Support & Security Consulting

Daily Responsibilities

Key Responsibilities

• Support end‑to‑end Application Security services including intake, assessment scoping, and stakeholder engagement
• Conduct and support SAST, SCA, DAST, API Security, and Mobile Security assessment activities
• Validate vulnerabilities and reduce false positives
• Provide remediation guidance to development teams
• Assist with AppSec backlog reduction and vulnerability closure efforts
• Integrate security tooling into CI/CD pipelines and development workflows
• Support secure software development lifecycle initiatives
• Implement and improve security automation capabilities
• Enhance developer self‑service security capabilities
• Support cloud‑based DevSecOps and application security processes
• Track and manage security findings through Jira and defect management workflows
• Create documentation and operational procedures for AppSec processes
• Partner with cybersecurity and software engineering teams to improve security posture
• Support web, mobile, API, and cloud‑enabled application security assessments