AppSec Engineer: Secure DevOps for Salesforce & .NET

Resolution Technologies, Inc.

Atlanta (GA)

On-site

USD 120,000 - 170,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Resolution Technologies, Inc. is seeking an Application Security Engineer to safeguard Salesforce, .NET, and Azure applications across the enterprise. The role emphasizes secure coding, SDLC integration, and hands-on pen testing with DevSecOps tooling.

The ideal candidate brings 7+ years in application security, experience with Salesforce and Azure services, and strong scripting skills to automate security controls and reviews. Join a team focused on risk reduction and secure software delivery.

Qualifications

Bachelor degree in Computer Science, Information Security, or related field (or equivalent).
7+ years of experience in application security, DevSecOps, or related roles.
Strong understanding of secure coding practices in .NET and Apex (Salesforce).
Experience with Salesforce security architecture and Azure App Services.
Proficiency in CI/CD pipelines and integrating security tools into Git and Azure DevOps workflows.
Familiarity with NIST 800-53, NIST CSF, and other cybersecurity frameworks.
Hands‑on experience with SAST, DAST, SCA, and container security tools.
Strong scripting skills (e.g., PowerShell, Python, Bash) for automation.

Responsibilities

Salesforce Security: Review Apex code, Visualforce pages, and Lightning components for security vulnerabilities.
Ensure proper configuration of Salesforce security settings including profiles, permission sets, role hierarchies, and sharing rules.
Implement and monitor field-level security, object-level access, and record-level access controls.
Validate secure integration patterns for external APIs and third‑party apps within Salesforce.
Enforce OAuth scopes, connected app policies, and IP restrictions.
Conduct regular security health checks and Salesforce Shield audits.
Align Salesforce security architecture with NIST 800‑53 and NIST CSF controls.
SDLC: Collaborate with development teams to integrate security best practices into the SDLC.
Conduct secure code reviews for applications built on Salesforce, .NET, and Azure platforms.
Design and review application architectures to ensure alignment with NIST controls.
Perform threat modeling and risk assessments for new and existing applications.
Maintain and enhance security integrations with Git, Azure DevOps, and other version control systems.
Application Security Testing: Perform manual and automated penetration testing of web applications and APIs.
Identify and remediate vulnerabilities in Salesforce customizations, .NET codebases, and Azure‑hosted services.
Tool Management: Own the configuration, tuning, and maintenance of DevSecOps tools (e.g., SonarQube, Checkmarx, Veracode, Fortify).
Monitor and report on security tool performance and coverage.
Governance, Risk & Compliance: Map application security controls to NIST standards and support audit readiness.
Document security requirements and ensure traceability to NIST control families.
Collaboration & Training: Partner with engineering, QA, and operations teams to drive security awareness and training.
Provide guidance on secure coding standards and remediation strategies.
Incident Response & Risk Management: Support incident response efforts related to application vulnerabilities.
Contribute to risk assessments and mitigation planning for new and existing applications.