Remote Application Security Engineer (DevSecOps)

ArdentMC; United States; À distance; USD 110 000 - 165 000; Plein temps

Résumé du poste

Ardent is seeking an Application Security Engineer to join the team in a fully remote capacity in the United States. The role focuses on security assessments, vulnerability management, DevSecOps enablement, and secure reference implementations across USCIS systems and delivery environments.

You will work with development, security, platform, and operations teams to identify risks, support remediation, validate fixes, and improve automation.

Qualifications

• Bachelor’s degree in IT / CS / Cybersecurity / Engineering or related field.
• Minimum of 4 years of IT experience plus 4 years in application security/DevSecOps.
• Advanced technical knowledge of application security technologies, environments, and practices.
• Experience with SAST/DAST/SCA and container scanning, and remediation guidance.
• Experience integrating security into CI/CD pipelines and DevSecOps workflows.
• Experience developing PoC secure reference implementations and utility applications.

Responsabilités

• Perform application security testing and vulnerability assessments.
• Support automated security scanning in development, build, test, release, and runtime activities.
• Document, triage, track, and validate vulnerabilities through remediation and closure.
• Provide guidance on secure coding practices and remediation to development teams.
• Develop PoC secure reference implementations and useful security utilities.
• Monitor compliance with application security standards and controls.
• Collect metrics and reporting data for continuous improvement.
• Support DevSecOps and vulnerability reduction initiatives across programs.

Connaissances

Application security testing

Vulnerability assessments

DevSecOps

Secure coding practices

CI/CD integration

API security

Security automation

PoC development

Formation

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field

Outils

SAST

DAST

SCA

Container scanning

Dependency security

SonarQube

Nexus IQ

Checkmarx

Twistlock

Description du poste

Ardent is seeking an Application Security Engineer to join the team in a fully remote capacity in the United States. The role focuses on security assessments, vulnerability management, DevSecOps enablement, and secure reference implementations across USCIS systems and delivery environments.

You will work with development, security, platform, and operations teams to identify risks, support remediation, validate fixes, and improve automation.