Remote App Security Engineer - 6 Month Contract

Innova Solutions, Inc; United States; Remote; USD 83,000 - 90,000; Full time

Benefits offered by this job

Medical & pharmacy coverage

401(k)

HSA & FSA

Life Insurance

Short/Long-term Disability

Paid time off

Job summary

Innova Solutions is seeking an Application Security Engineer for a remote, 6-month W-2 contract. The role involves integrating security controls across the SDLC and CI/CD pipelines, and onboarding applications to security scanning tools such as Checkmarx.

You will work with GitHub, GitLab, Azure DevOps, and Jenkins, performing secure code reviews and guiding remediation efforts. The position emphasizes hands-on security expertise beyond automated tooling and collaboration with development teams

Qualifications

• Responsibilities include integrating security controls and scanning capabilities throughout the software development lifecycle and CI/CD pipelines.
• Configure and execute SAST and SCA scans and establish recurring scanning schedules.
• Review scan results and support remediation of identified vulnerabilities.
• Hands-on application security expertise beyond automated tooling, including secure code review and third-party library assessment.

Responsibilities

• The resource will support the client's enterprise Application Security program by integrating security controls and scanning capabilities throughout the software development lifecycle and CI/CD pipelines.
• Onboard applications into security scanning solutions such as Checkmarx.
• Work across multiple source code management and DevOps platforms (GitHub, GitLab, Azure DevOps, Jenkins).
• Collaborate with application and development teams to identify security gaps and provide remediation guidance.

Job description

Innova Solutions is seeking an Application Security Engineer for a remote, 6-month W-2 contract. The role involves integrating security controls across the SDLC and CI/CD pipelines, and onboarding applications to security scanning tools such as Checkmarx.

You will work with GitHub, GitLab, Azure DevOps, and Jenkins, performing secure code reviews and guiding remediation efforts. The position emphasizes hands-on security expertise beyond automated tooling and collaboration with development teams