Remote AppSec Engineer – CI/CD Security & Automation

AgileEngine; Blacksburg (VA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

Exciting projects

Flextime

Job summary

AgileEngine seeks a Middle Application Security Engineer to drive hands-on DevSecOps within a large-scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines and guide Java and Python teams on secure coding practices.

The role requires 3–5 years of combined software engineering and AppSec experience, strong Python skills, Java reading ability, CI/CD tool knowledge, and the ability to work with minimal supervision.

Qualifications

• 3–5 years of combined software engineering and AppSec experience.
• Solid Python proficiency for automation and scripting.
• Ability to read and navigate Java source code.
• Authorized to work in the US with no visa sponsorship needed.
• Working knowledge of modern CI/CD orchestration tools.
• Experience with vulnerability scoring frameworks.
• Able to work with minimal supervision on complex tasks.
• Upper-intermediate English level.

Responsibilities

• Write and maintain scripts to integrate SAST, DAST, and SCA into CI/CD pipelines.
• Tune security scanners to reduce false positives and raise alert confidence.
• Assist in deploying automated hardened baselines and secure coding patterns.
• Provide code-level remediation guidance to Java and Python teams.

Skills

Python

Java

CI/CD tools

Vulnerability management

Scripting/Automation

Upper-intermediate English

Tools

CI/CD tooling

SAST

DAST

SCA

Job description

AgileEngine seeks a Middle Application Security Engineer to drive hands-on DevSecOps within a large-scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines and guide Java and Python teams on secure coding practices.

The role requires 3–5 years of combined software engineering and AppSec experience, strong Python skills, Java reading ability, CI/CD tool knowledge, and the ability to work with minimal supervision.