Remote App Security Engineer – DevSecOps Focus

Ardent Management Consulting, Inc.; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Federal holidays off

Tuition reimbursement

Professional development support

Wellness stipends

Job summary

Ardent is seeking an Application Security Engineer to join the team in a remote capacity. The role focuses on security testing, vulnerability management, secure DevSecOps enablement, and reference implementations across USCIS systems and delivery environments.

The ideal candidate will have strong knowledge of SAST/DAST, CI/CD integration, and experience guiding development teams on secure coding practices. This position offers flexible work arrangements and growth opportunities in security

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 4 years of professional IT experience, plus 4 years of experience supporting application security, cybersecurity, DevSecOps, or closely related subject matter requirements.
• Advanced technical knowledge of application security technologies, specialized applications, and operational environments.
• Experience with SAST, DAST, SCA, container scanning, and dependency security.
• Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows.

Responsibilities

• Perform application security testing and vulnerability assessments using approved tools and methods.
• Assess web applications, APIs, services, containers, dependencies, and delivery environments for security weaknesses.
• Support automated security scanning and CI/CD pipeline integration.
• Document, triage, track, and validate vulnerabilities through remediation and closure.
• Provide guidance to development teams on secure coding and remediation of weaknesses.
• Develop proof-of-concept secure reference implementations and utility apps to demonstrate secure patterns.

Skills

App security

Vulnerability assessment

DevSecOps

Secure coding

CI/CD pipelines

SAST

DAST

NIST

Zero Trust

Kubernetes security

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

SonarQube

Nexus IQ

Checkmarx

Twistlock

Splunk

New Relic

Job description

Ardent is seeking an Application Security Engineer to join the team in a remote capacity. The role focuses on security testing, vulnerability management, secure DevSecOps enablement, and reference implementations across USCIS systems and delivery environments.

The ideal candidate will have strong knowledge of SAST/DAST, CI/CD integration, and experience guiding development teams on secure coding practices. This position offers flexible work arrangements and growth opportunities in security