Remote Application Security Engineer - DevSecOps

Ardent; Washington (District of Columbia); Remote; USD 120,000 - 165,000; Full time

Job summary

Ardent is seeking an Application Security Engineer to join our team in a remote capacity. The role focuses on application security assessment, vulnerability management, DevSecOps enablement, and secure reference implementations across USCIS systems and delivery environments.

You will work with development, security, platform, and operations teams to identify risks, support remediation, validate fixes, and improve security automation while maintaining secure practices throughout the lifecycle.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
• 4+ years of IT experience plus 4 years in application security/DevSecOps or related areas.
• Advanced technical knowledge of application security technologies and environments.
• Experience performing technical analysis, system integration, and guidance for complex app security initiatives.
• Experience with SAST, DAST, SCA, container scanning, and dependency security.
• Experience integrating security controls into CI/CD pipelines and DevSecOps workflows.
• Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure SDLC practices.
• Collaborative work across development, security, platform, and operations teams.

Responsibilities

• Perform application security testing and vulnerability assessments using approved tools and techniques.
• Support automated security scanning across applications, APIs, services, dependencies, containers, and CI/CD pipelines.
• Document, triage, track, and validate vulnerabilities through remediation and closure.
• Provide technical guidance on secure coding practices and remediation to development teams.
• Assist with DevSecOps tool integration, automation, and security gates within pipelines.
• Develop proof-of-concept secure reference implementations and utility applications for secure design patterns.
• Monitor compliance with application security standards (Zero Trust, NIST, CIS, OWASP).
• Collect metrics and evidence for reporting improvements and remediation status.

Skills

Application security testing

Vulnerability assessment

DevSecOps

CI/CD pipelines

SAST

DAST

SCA

Container security

Cross-team collaboration

Threat modeling

Education

Bachelor’s degree in IT/CS/cybersecurity or related field

Tools

SonarQube

Nexus IQ

Checkmarx

Twistlock

Kubernetes

Splunk

New Relic

Harness

Job description

Ardent is seeking an Application Security Engineer to join our team in a remote capacity. The role focuses on application security assessment, vulnerability management, DevSecOps enablement, and secure reference implementations across USCIS systems and delivery environments.

You will work with development, security, platform, and operations teams to identify risks, support remediation, validate fixes, and improve security automation while maintaining secure practices throughout the lifecycle.