Remote: Application Security Remediation Engineer

JobCubby; New York, Northern (NY, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Arctiq is seeking an Application Security Remediation Engineer to support vulnerability remediation across multiple application platforms and stacks. You will work directly with the customer’s software engineering teams to remediate Wiz-identified vulnerabilities in .NET, Java, Go, PHP, and Node.js workloads while ensuring compatibility and uptime.

The role focuses on upgrading dependencies, securing container images, and designing reusable remediation patterns within enterprise environments,

Qualifications

• Strong software engineering experience in one or more of .NET/C#, Java, Go, PHP, or Node.js.
• Experience working with enterprise-scale application environments.
• Experience remediating application vulnerabilities and applying secure coding practices.
• Strong understanding of OWASP Top 10 vulnerabilities and software supply-chain security.
• Experience upgrading third-party libraries, frameworks, packages, and application dependencies.
• Docker and container image remediation experience.
• Kubernetes application deployment and container security experience.
• CI/CD pipeline integration, Git-based workflows, and Secure Software Development Lifecycle practices.
• Experience with automated security testing, SAST, SCA, and dependency-management tooling.
• Experience with vulnerability management programs and prioritization of Critical and High findings.
• Experience using Wiz, Snyk, Veracode, Checkmarx, SonarQube, or similar tools.
• Strong debugging, analytical, root-cause investigation, documentation, and communication skills.

Responsibilities

• Analyze and remediate application-level vulnerabilities identified by Wiz.
• Resolve code vulnerabilities within .NET, Java, PHP, Go, and Node.js applications.
• Upgrade vulnerable libraries, frameworks, packages, and third-party dependencies.
• Perform compatibility and regression testing for upgraded software components.
• Remediate container image vulnerabilities and insecure build configurations.
• Modernize and rebuild affected images to comply with organizational security standards.
• Work with development teams to incorporate secure coding practices.
• Address insecure configurations within application runtimes and frameworks.
• Validate completed remediations and ensure findings are accurately resolved within Wiz.
• Design and document reusable remediation patterns for recurring vulnerability classes.
• Support secure software delivery through DevSecOps and CI/CD integration.
• Collaborate with SRE, cloud, platform, and security teams throughout remediation activities.

Skills

.NET/C#

Java

Go

PHP

Node.js

Wiz experience

Container security

Cloud-native apps

Amazon EKS

CI/CD pipelines

Security engineering

SAST/SCA tooling

OWASP tooling

DevSecOps toolchains

Regulated industries

Tools

Wiz

Docker

Kubernetes

SQL Server

MySQL

Git

GitHub / GitLab

CI/CD platforms

SAST / SCA

OWASP tooling

DevSecOps toolchains

Job description

Arctiq is seeking an Application Security Remediation Engineer to support vulnerability remediation across multiple application platforms and stacks. You will work directly with the customer’s software engineering teams to remediate Wiz-identified vulnerabilities in .NET, Java, Go, PHP, and Node.js workloads while ensuring compatibility and uptime.

The role focuses on upgrading dependencies, securing container images, and designing reusable remediation patterns within enterprise environments,