Information Security Engineer 4

Jobs via Dice; Charlotte (NC); Hybrid; Full time

Job summary

A dynamic opportunity for an Application Security Engineer in Charlotte, NC with a hybrid working schedule and a focus on enhancing software security practices. Ideal for a mid-senior level individual with a passion for automation and security within the software development lifecycle. Responsibilities include managing security tools, collaborating with teams, and conducting security training. Candidates should have over 5 years of experience in application and information security.

Qualifications

• 5+ years in Information Security Engineering or equivalent experience.
• Experience in Application Security and collaborating with development teams.
• 3+ years in programming languages: .NET, C#, Java, Rust, C++.

Responsibilities

• Manage and optimize security automation tools, focusing on SCA.
• Collaborate with internal teams to ensure accurate vulnerability tracking.
• Deliver security training to internal development teams.

Skills

Application Security

DevSecOps

Scripting (Python, PowerShell)

Secure Software Development Lifecycle

Analytical Skills

Education

Relevant Certifications (CISSP, CISM, CEH)

Tools

Checkmarx One

BlackDuck

CI/CD tools (GitHub, Jenkins)

Jira

Confluence

Job description

1 day ago Be among the first 25 applicants

Location: Charlotte, NC

Salary: $69.00 USD Hourly - $74.00 USD Hourly

Description: Application Security Engineer - Information Security Engineer 4

Hybrid Work Schedule in one of the following cities:

Charlotte, NC

Chandler, AZ

Dallas, TX

Minneapolis, MN

3 days onsite, 2 remote

2+ year contract with possibility for extensions/conversion to FTE

About The Job

As an Application Security Engineer, you will be part of a dynamic team focused on enhancing the security posture of our client's software development lifecycle. You will lead efforts in Software Composition Analysis (SCA), collaborate with cross-functional teams, and drive secure development practices across the enterprise. This role is ideal for someone passionate about automation, open-source security, and developer experience.

Responsibilities

• Manage and optimize security automation tools, with a primary focus on SCA (e.g., Checkmarx One, BlackDuck).
• Collaborate with internal teams (e.g., ServiceNow AVR, DevOps, vulnerability operations) to ensure accurate vulnerability tracking and remediation.
• Partner with security architects to design workflows and best practices that enhance developer experience.
• Deliver security training and outreach to internal development teams.
• Conduct adversarial security analysis and recommend tools and practices aligned with industry standards.
• Support audits (e.g., SOC 2, PCI-DSS) and contribute to policy development with governance and compliance teams.
• Work with CTO pipeline teams to improve code quality, open-source security, and SBOM generation.
• Enhance container security tools and platforms, including Kubernetes and OpenShift.
• Design and implement advanced security solutions for open-source software supply chain management.
  
  

Minimum Qualifications

• 5+ years of experience in Information Security Engineering or equivalent (e.g., military, education, training).
• 5+ years of experience in Application Security and DevSecOps, working closely with development teams.
• 3+ years of experience in one or more programming languages: .NET, C#, Java, Rust, C++.
  
  

Preferred Qualifications

• Proficiency in scripting languages such as Python and PowerShell.
• Experience with CI/CD tools and technologies (e.g., GitHub, Jenkins, Maven, Artifactory, Harness, Xray).
• Strong understanding of Secure Software Development Lifecycle (SSDLC).
• Deep knowledge of OWASP Top 10 and CWE.
• Experience documenting SCA procedures and tool configurations.
• Familiarity with AI tools for false positive reduction, auto-remediation, and open-source threat intelligence.
• Experience with Jira and Confluence.
• Strong analytical and problem-solving skills.
• Relevant certifications (e.g., CISSP, CISM, CEH).
• Experience with container security and SBOM generation using CycloneDX or SPDX.
  
  

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  Software Development

Referrals increase your chances of interviewing at Jobs via Dice by 2x

Sign in to set job alerts for “Information Security Engineer” roles.

Charlotte, NC $50,000.00-$55,000.00 3 weeks ago

Charlotte Metro $99,461.00-$128,329.00 1 hour ago

Cybersecurity & Cloud Controls Specialist

Division President - Commercial Security

Physical Therapist - Acute Care Rehab - Atrium Health Mercy - PRN

Registered Nurse (RN) - MICU - Medical Intensive Care Unit - $32-58 per hour

Remote Helpdesk Support Technician (Active Directory)

Registered Nurse (RN) - MICU - Medical Intensive Care Unit - $32-58 per hour

Cyber Security Manager - CIAM Engineering Leader

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.