Remote AppSec & Remediation Engineer

ISG International Service Group; Spain (TX); On-site; USD 75,000 - 104,000; Full time

Job summary

ISG International Service Group is seeking an Application Security & Remediation Engineer for a permanent role within a long-term international technology program. The role goes beyond running automated scans and focuses on validating findings, removing false positives, and ensuring issues are fixed and retested.

You will work on manual testing with Burp Suite, analyze tool outputs, prioritize remediation by risk, and guide engineering teams through secure design and CI/CD integration.

Qualifications

• Hands-on experience in application security or vulnerability management.
• Good understanding of OWASP risks and able to communicate with technical and business stakeholders.
• Experience with scripting or development languages (Python, Java, .NET) is valuable.

Responsibilities

• Manual testing of web applications and APIs using Burp Suite.
• Analysis of findings from code, dependency and runtime security tools.
• Remediation guidance and follow-up with engineering teams.
• Security integration within CI/CD workflows.
• Application risk reviews and secure-design discussions.
• Reporting on remediation progress and risk trends.

Skills

Application security

Vulnerability management

Stakeholder communication

OWASP risks

CI/CD security

Tools

Burp Suite

Azure DevOps

ServiceNow

Security dashboards

CI/CD tooling

Job description

ISG International Service Group is seeking an Application Security & Remediation Engineer for a permanent role within a long-term international technology program. The role goes beyond running automated scans and focuses on validating findings, removing false positives, and ensuring issues are fixed and retested.

You will work on manual testing with Burp Suite, analyze tool outputs, prioritize remediation by risk, and guide engineering teams through secure design and CI/CD integration.