Remote Application Security Engineer (DevSecOps)

MassGenics, Inc.; New York, Northern (NY, KY); Hybrid; USD 83,000 - 90,000; Full time

Benefits offered by this job

Medical & pharmacy coverage

Dental/vision insurance

401(k)

Health saving account (HSA)

Flexible spending account (FSA)

Life Insurance

Pet Insurance

Short term Disability

Long term Disability

Sick time

Paid leaves

Job summary

Innova Solutions is hiring an Application Security Engineer to support enterprise security initiatives within the software development lifecycle and CI/CD pipelines.

The role involves integrating scanning tools across GitHub, GitLab, Azure DevOps, and Jenkins, onboarding apps to security scanners, and guiding remediation with development teams. Remote, W2 full-time contract over 6+ months.

Qualifications

• Experience implementing SAST/SCA in SDLC and CI/CD.
• Hands-on remediation guidance for vulnerabilities in applications.
• Knowledge of open-source software risk management.

Responsibilities

• Configure and run SAST/SCA scans and establish schedules.
• Review scan results and coordinate remediation with dev teams.
• Onboard applications into security scanning solutions like Checkmarx.
• Provide secure code reviews and identify weaknesses beyond tooling.
• Assess third‑party libraries and software supply‑chain risks.

Skills

SAST

SCA

DevSecOps

Security in SDLC

Vulnerability remediation

Secure code review

CI/CD

GitHub

GitLab

Azure DevOps

Jenkins

Checkmarx

Tools

GitHub

GitLab

Azure DevOps

Jenkins

Checkmarx

Job description

Innova Solutions is hiring an Application Security Engineer to support enterprise security initiatives within the software development lifecycle and CI/CD pipelines.

The role involves integrating scanning tools across GitHub, GitLab, Azure DevOps, and Jenkins, onboarding apps to security scanners, and guiding remediation with development teams. Remote, W2 full-time contract over 6+ months.