Fort Worth Onsite AppSec Engineer: CI/CD & Tooling

KellyMitchell Group; Fort Worth (TX); In loco; USD 43.000 - 62.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESOP

401K

Descrizione del lavoro

KellyMitchell is seeking an Application Security Engineer for a contract role in Fort Worth, TX. You will own and tune application security tooling, including GitHub code scanning, SAST, SCA, DAST, and API security, working with development teams to remediate vulnerabilities.

You will build security into CI/CD pipelines with Python/Java/PowerShell automation and define security controls across the software lifecycle. This role requires onsite presence 3 days weekly.

Competenze

• Bachelor's degree or equivalent in CS/Cybersecurity.
• 3+ years in cybersecurity engineering with hands-on AppSec.
• Experience configuring AppSec tools (GitHub Advanced Security/CodeQL, Checkmarx, Veracode, Snyk, Fortify, SonarQube).
• Experience integrating security into CI/CD pipelines.
• Experience collaborating with developers to remediate vulnerabilities.
• Strong communication skills; onsite in Fort Worth, TX 3 days per week.

Mansioni

• Configure, tune, maintain AppSec tools like GitHub code scanning, SAST, SCA, DAST.
• Scan apps/APIs for vulnerabilities and triage findings.
• Guide remediation with development teams.
• Integrate security checks into CI/CD pipelines.
• Develop automation in Python/Java/PowerShell.
• Define authentication/authorization and data protection controls.
• Support threat modeling and secure design reviews.
• Translate policies into scalable controls.

Conoscenze

AppSec engineering

Code scanning tools

CI/CD integration

Python automation

Vulnerability triage

Developer collaboration

Security tooling ownership

Formazione

Bachelor's degree in CS/Cybersecurity or related field

Strumenti

GitHub Advanced Security/CodeQL

Checkmarx

Veracode

Snyk

Fortify

SonarQube

Descrizione del lavoro

KellyMitchell is seeking an Application Security Engineer for a contract role in Fort Worth, TX. You will own and tune application security tooling, including GitHub code scanning, SAST, SCA, DAST, and API security, working with development teams to remediate vulnerabilities.

You will build security into CI/CD pipelines with Python/Java/PowerShell automation and define security controls across the software lifecycle. This role requires onsite presence 3 days weekly.