Remote Senior Application Security Engineer (DevSecOps)

SMX Services & Consulting, Inc.; United States; Remote; USD 112,000 - 156,000; Full time

Benefits offered by this job

Remote work

Contract renewal possibilities

Job summary

SMX Services & Consulting, Inc. is seeking a Senior Application Security Engineer / DevSecOps to strengthen its application security program. This hands-on role focuses on security testing, vulnerability analysis, and CI/CD integration.

Responsibilities include managing SAST/DAST/SCA, remediation guidance, and secure SDLC practices while collaborating with development teams. The position is remote (LATAM region) and a 6-month contract with renewal; bilingual in Spanish/English.

Qualifications

• 5+ years of experience in Application Security, DevSecOps, or related cybersecurity discipline.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience integrating security into GitLab CI/CD.
• Knowledge of OWASP Top 10 and web app vulnerabilities.
• Strong communication and collaboration skills.

Responsibilities

• Configure and operate SAST, DAST, and SCA security platforms and resolve platform issues.
• Analyze vulnerabilities, prioritize fixes, and document risk.
• Provide remediation guidance to developers and verify fixes.
• Develop and report on security controls, dashboards, and metrics in CI/CD.
• Promote Secure SDLC practices and collaboration with development teams.
• Engage Security Champions across teams.
• Maintain vulnerability records and evidence for stakeholders.
• Identify opportunities to automate security processes.
• Ensure security requirements are integrated throughout the SDLC.

Skills

Application Security

DevSecOps

GitLab CI/CD

SAST

DAST

SCA

Vulnerability Assessment

Security Communication

Tools

SAST

DAST

SCA

Job description

SMX Services & Consulting, Inc. is seeking a Senior Application Security Engineer / DevSecOps to strengthen its application security program. This hands-on role focuses on security testing, vulnerability analysis, and CI/CD integration.

Responsibilities include managing SAST/DAST/SCA, remediation guidance, and secure SDLC practices while collaborating with development teams. The position is remote (LATAM region) and a 6-month contract with renewal; bilingual in Spanish/English.