Remote AppSec Engineer — DevSecOps & Remediation

Aether Biomedical

United States

Remote

USD 100,000 - 160,000

Full time

14 days+

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Aether Biomedical is seeking a Security Analyst to strengthen its application security posture on a 12-month contract via 100% remote work. You will analyze vulnerabilities withDefectDojo, collaborate with Dev teams to remediate, and report progress to Tech Leads and security profiles.

You will drive remediation, implement secrets management, and leverage GitLab security features. Candidate should be proficient in SCA/SAST tools like SonarQube, with experience in Power BI reporting and

Qualifications

Experience with vulnerability management tools (DefectDojo or equivalent).
Knowledge of DevSecOps practices and CI/CD pipelines.
Knowledge of secure secrets management procedures.
Proficiency with GitLab and its security features.
Familiarity with SCA and SAST tools (SonarQube).
Reporting and data visualization skills (Power BI).
Experience using Jira/Confluence.
Experience with Agile Scrum methodology.
Experience with OWASP security recommendations and NIS2 compliance.
Proven experience with major development languages: Java, Angular, Python, Drupal, etc.

Responsibilities

Analyze security state component by component using DefectDojo.
Collaborate with development teams on vulnerability mitigation.
Present a remediation plan in coordination with Tech Leads and security profiles.
Drive the execution of the remediation plan.
Provide technical support to the DevOps team.
Define and implement secrets management procedures.
Leverage GitLab Ultimate security features.
Contribute to deployment of SCA solutions (SonarQube).
Set up Power BI dashboards for security reporting.
Produce reports for security team and developers.
Ensure visibility on evolution of security posture.