Onsite Contract: Application Security Engineer (2–3 Years)

AE Business Solutions; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

PTO

401K match

Job summary

AE Business Solutions is seeking a Security Analyst to support application security across on-premises and cloud environments. The contractor will collaborate with technical teams, remediation partners, and business stakeholders to protect applications, systems, and information.

The role combines security design, remediation, and operational support, focusing on practical security controls throughout the development lifecycle and continuous improvement of security processes and tooling.

Qualifications

• Experience remediating vulnerabilities in systems and web applications.
• Ability to interpret vulnerability scans and pen test reports.
• Familiarity with OWASP Top 10 and secure software practices.
• Understanding of NIST CSF and secure SDLC guidance.
• Basic Python experience.

Responsibilities

• Review technical designs and recommend security practices and controls.
• Advise teams during the application lifecycle on security measures and remediation strategies.
• Assess threats and identify countermeasures that align with business needs.
• Apply security technologies such as firewalls, IDS/IPS, DLP, EPP, and log aggregation.
• Support projects by ensuring security implementation, readiness, and validation.
• Maintain and track metrics for initiatives and projects.
• Create and maintain automation infrastructure and document operational handoffs.
• Integrate security tools into development processes and evaluate new technologies.
• Support continuous improvement of security processes and tooling.

Skills

Vulnerability remediation

Vulnerability scanning

OWASP Top 10

NIST Cybersecurity Framework

Python

Communication skills

Education

Bachelor’s degree or equivalent

Job description

AE Business Solutions is seeking a Security Analyst to support application security across on-premises and cloud environments. The contractor will collaborate with technical teams, remediation partners, and business stakeholders to protect applications, systems, and information.

The role combines security design, remediation, and operational support, focusing on practical security controls throughout the development lifecycle and continuous improvement of security processes and tooling.