Senior App Security Engineer: SAST/DAST, IAM & CI/CD

Artifintech; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Artifintech in Houston seeks an experienced Application Security Engineer to fortify our software stack across servers, APIs, and cloud environments. You will implement secure baselines, perform SAST/DAST/SCA assessments, manage IAM and MFA, and integrate security into CI/CD pipelines.

You will work with DevOps and development teams to mitigate risks, respond to incidents, and document security controls and standards. A strong background in CIS benchmarks, cloud security, and SIEM is essential.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 12 years of experience in application security.
• Preferred CISSP, CEH, or CASE certifications.

Responsibilities

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
• Conduct Static Application Security Testing (SAST) , Dynamic Application Security Testing (DAST) , and Software Composition Analysis (SCA) assessments for in house and third party applications.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity Access Management (IAM) , including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
• Investigate and respond to server and application security incidents.
• Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management.
• Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the Security Information and Event Management (SIEM) system.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes. Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

Skills

Application security concepts

SIEM logging & monitoring

Threat modelling

CI/CD integration

NIST / ISO 27001 familiarity

Education

Bachelor's degree in CS/IT or related field

Tools

SAST tools

DAST tools

SCA tools

AWS IAM

CI/CD security tooling

Docker security

Kubernetes security

Job description

Artifintech in Houston seeks an experienced Application Security Engineer to fortify our software stack across servers, APIs, and cloud environments. You will implement secure baselines, perform SAST/DAST/SCA assessments, manage IAM and MFA, and integrate security into CI/CD pipelines.

You will work with DevOps and development teams to mitigate risks, respond to incidents, and document security controls and standards. A strong background in CIS benchmarks, cloud security, and SIEM is essential.