AWS App Security Engineer (Hybrid) | DevSecOps & SDLC

System One, Inc.; Knoxville (TN); Hybrid; USD 110,000 - 150,000; Full time

Job summary

System One, Inc. is seeking an AWS Application Security Analyst to bolster security across the SDLC in a hybrid role with multiple locations including Knoxville, TN.

The role involves close collaboration with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks throughout the SDLC. The ideal candidate will have hands-on experience with application security testing (SAST/DAST/SCA), threat modeling, secure code review, DevSecOps, and

Qualifications

• 5+ years of application security experience.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience performing manual code reviews and security assessments.
• Strong experience with threat modeling and security risk assessments.
• Working knowledge of AWS security and securing applications in AWS environments.
• Experience with DevSecOps and integrating security testing into CI/CD pipelines.

Responsibilities

• Perform manual and automated application and source-code security reviews to identify vulnerabilities and security risks.
• Conduct threat modeling and application security risk assessments for new and existing applications.
• Work with development teams to determine appropriate remediation approaches for security findings.
• Utilize SAST, DAST, and SCA tools for application security testing.
• Integrate application security controls and automated security testing into CI/CD pipelines.
• Evaluate application security risks across AWS cloud and containerized environments.
• Apply knowledge of secure coding practices, network protocols, encryption, authentication, and common application vulnerabilities.
• Partner with development, DevOps, cloud, and cybersecurity teams to strengthen DevSecOps practices throughout the SDLC.
• Develop security guidance, FAQs, standards, and reusable application security best practices for development teams.
• Clearly communicate vulnerabilities, security risks, and remediation recommendations to technical stakeholders.

Skills

Application security

Threat modeling

SAST

DAST

SCA

DevSecOps

CI/CD security

AWS security

Container security

Programming knowledge (Java/Python/JS/

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

GitHub

Jenkins

Job description

System One, Inc. is seeking an AWS Application Security Analyst to bolster security across the SDLC in a hybrid role with multiple locations including Knoxville, TN.

The role involves close collaboration with software development, cloud, DevOps, and cybersecurity teams to identify, assess, and remediate security risks throughout the SDLC. The ideal candidate will have hands-on experience with application security testing (SAST/DAST/SCA), threat modeling, secure code review, DevSecOps, and