AppSec Engineer: CI/CD Security & AI-Driven Scanning

Jobtailor; Minnesota; On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking an experienced Application Security professional to strengthen our code-level security across CI/CD pipelines, with emphasis on SAST, SCA, and vulnerability detection in Java-based environments.

The role covers expanding DAST capabilities, vulnerability triage in ServiceNow, and AI-driven security initiatives, including automation and LLM-driven scanning techniques, while supporting cloud and on-prem infrastructure with Docker-based tooling.

Qualifications

• 5+ years of hands-on AppSec experience focusing on SAST, SCA, and vulnerability detection at code level.
• Experience integrating and managing security tools within CI/CD pipelines (Jenkins required).
• Experience configuring, tuning, or maintaining application security scanning tools.
• 2+ years working with Java-based applications, automation, or development environments.
• Knowledge of cloud/containerization (Docker) supporting security tooling environments.
• Strong understanding of how vulnerabilities are identified in application code and secure SDLC practices.

Responsibilities

• Configure and maintain application security tools within CI/CD pipelines in a Jenkins-heavy environment.
• Perform application security scanning using SAST and SCA methodologies.
• Support the development and expansion of dynamic application security testing (DAST) capabilities.
• Analyze, triage, and track vulnerabilities with proper documentation and workflow management in ServiceNow.
• Contribute to AI-focused application security initiatives, including automation and LLM-driven scanning techniques.
• Maintain and enhance internal Java-based automation tools supporting security processes.
• Support infrastructure components across cloud, on-prem, and containerized environments (Docker).

Skills

SAST

SCA

Vulnerability detection

CI/CD integration

Jenkins

Java-based apps

Docker

Secure SDLC

Automation tooling

Tools

Jenkins

Job description

Jobtailor is seeking an experienced Application Security professional to strengthen our code-level security across CI/CD pipelines, with emphasis on SAST, SCA, and vulnerability detection in Java-based environments.

The role covers expanding DAST capabilities, vulnerability triage in ServiceNow, and AI-driven security initiatives, including automation and LLM-driven scanning techniques, while supporting cloud and on-prem infrastructure with Docker-based tooling.