Information Security Specialist

Pyramid, Inc; Illinois; On-site; USD 110,000 - 160,000; Full time

Job summary

Pyramid, Inc. in the United States is seeking an Application Security Engineer to implement and support SAST/ SCA tools, migrate to SaaS configurations, and harden CI/CD pipelines for a Cloud/SaaS platform.

You will manage Docker containers, Helm charts, Rancher, and automate security workflows using Java, Groovy, and Python, while aligning with incident response and compliance requirements.

Qualifications

• Experience implementing SAST/ SCA in Cloud/SaaS environments.
• Proficient with Jenkins builds and CI/CD pipelines.
• Hands-on with Docker containers, Helm, and Rancher.
• Strong coding in Java and Python; Gradle build scripts.

Responsibilities

• Update container images and manage tool configurations.
• Assist with Jenkins builds, onboarding teams and troubleshooting.
• Automate routine security tasks and create self-service docs.
• Migrate and upgrade App Sec tools for SAST, OSA, and DAST.

Skills

SAST

OSA

DAST

Jenkins

GitLab

Docker

Cloud

Java

Python

Gradle

Job description

Application Security with AI AppSec, SAST/ SCA Docker HELM Charts DevOps / Jenkins Gradle Programming: Java, Python Cloud - AWS/Azure This Application Security Engineer will implement, and support solutions/technologies used for Static code analysis (SCA) & Static Application security testing (SAST) using industry leading tool. The engineer will be leading initiatives to improve application security posture by migrating infrastructure and re-configuring security tool services for Cloud/SaaS platform. Manage and support docker container, HELM charts, Rancher and automation with Java, Groovy and Python script. Updating and reconfigure build CI/CD jobs to integrate with security tools. Will look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation. Support and participate in incident response and technical investigations as needed. Ensure adherence to compliance regulations and policies.

Remote Work

Is this a remote position? If not, what Client locations can a resource work and how many days a week will they be required to work onsite?

I assume it would be a hub position. NC, TX, MN would be the preference but open to other hub locations as well. No remote option

Project / Initiatives Summary

Can you please provide a summary of the project/initiatives which describes whats being done?

• - SAST tool migration from on-prem to SaaS Configuration, pipeline update and testing items are pending on this one.
• - BAU / App Sec support Provide support for dev teams with scan boarding, troubleshoot pipeline issues.
• - Automate routine support work along with creating documents for self-service.
• - OSA tool migration Migrate existing projects and teams from one OSA solution to another.

Responsibilities

What are the top 5-10 responsibilities for this position? (Please be detailed as to what the candidate is expected to do or complete on a daily basis)

• - Update container images
• - Assist with Jenkins builds, onboard teams and troubleshoot issues
• - Automate support tasks
• - Setup, migrate and upgrade App Sec tools for SAST, OSA & DAST

Required Skills / Technologies

What skills/technologies are required (please include the number of years of experience required)?

• - SAST, OSA, DAST
• - Jenkins, Gitlab
• - Docker container and cloud
• - Programming Java, Python & Gradle

Preferred Skills / Attributes

What skills/attributes are preferred (these are a desired, not required)?

• - Threat modelling, AI AppSec

Interview Process

What does the interview process look like?

• o How many rounds? 3 Rounds HR / Vendor screening, Technical, - & Product manager
• o Video, phone, or in person? Video
• o How technical will the interviews be? 3

Department / Team Information

Are there any details about your department or team that may be helpful to know when sourcing candidates for this role and/or future roles with your group?

Make sure candidates have DevOps, Application Security, AI AppSec and cloud experience