Houston-Based Application Security Engineer - CI/CD & IAM

Ethereum Technologies; Houston (TX); On-site; USD 85,000 - 121,000; Full time

Job summary

Ethereum Technologies in Houston, TX seeks an experienced Application Security Engineer to design and enforce secure server baselines, perform security assessments, and manage IAM and MFA across cloud and on-prem environments.

You will integrate security into CI/CD, review Docker/Kubernetes configurations, and coordinate remediation of vulnerabilities while aligning with CIS benchmarks and industry standards.

Qualifications

• Strong understanding of application security concepts.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, particularly SIEM.

Responsibilities

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
• Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) assessments for in house and third party applications.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
• Investigate and respond to server and application security incidents.
• Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management.
• Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the Security Information and Event Management (SIEM) system.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes.
• Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

Skills

Application security concepts

SAST/DAST/SCA

AWS IAM Idaas

CI/CD security integration

SIEM monitoring

Tools

SAST tools

DAST tools

SCA tools

CI/CD tools

AWS IAM Idaas solutions

SIEM tools

Docker security

Kubernetes security

Job description

Ethereum Technologies in Houston, TX seeks an experienced Application Security Engineer to design and enforce secure server baselines, perform security assessments, and manage IAM and MFA across cloud and on-prem environments.

You will integrate security into CI/CD, review Docker/Kubernetes configurations, and coordinate remediation of vulnerabilities while aligning with CIS benchmarks and industry standards.