AppSec Tooling Engineer: CI/CD Automation & StackRox/Burp Expert

Advanced Onion, Inc.; Monterey (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Advanced Onion, Inc. is seeking an Application Security Tooling Engineer to design, operate, and continuously improve the AppSec scanning ecosystem across the SDLC.

You will integrate SCA with Sonatype, SAST with Fortify, StackRox for container security, and Burp Suite for DAST to ensure scalable, auditable security controls in regulated environments. The ideal candidate has hands-on experience deploying and tuning tools, integrating them into CI/CD, and guiding policy gates.

Qualifications

• Active Secret clearance required.
• 5+ years in application security engineering and/or DevSecOps in regulated environments.
• Hands-on administration and pipeline integration with listed tools.
• Strong CI/CD and automation skills; able to implement repeatable integrations and policy gates.

Responsibilities

• Own platform operations for AppSec tooling across the SDLC.
• Deploy, configure, harden, and maintain Sonatype, Fortify, StackRox, and Burp in on-prem or cloud environments.
• Manage upgrades, plugins, licensing, capacity planning, backup/restore, HA, and DR.
• Establish SLAs/SLOs, monitoring/alerting, and operational runbooks.
• CI/CD integration and policy-based gating in pipelines.

Skills

CI/CD automation

DevSecOps

Security tooling expertise

Vulnerability management

Tools

Sonatype Nexus IQ/Lifecycle

Fortify SCA/SSC

StackRox/Red Hat ACS

Burp Suite

Jira

Job description

Advanced Onion, Inc. is seeking an Application Security Tooling Engineer to design, operate, and continuously improve the AppSec scanning ecosystem across the SDLC.

You will integrate SCA with Sonatype, SAST with Fortify, StackRox for container security, and Burp Suite for DAST to ensure scalable, auditable security controls in regulated environments. The ideal candidate has hands-on experience deploying and tuning tools, integrating them into CI/CD, and guiding policy gates.