Senior Application Security Engineer

Strategic Staffing Solutions, Inc.; San Antonio (TX); Presencial; USD 125.000 - 165.000; Jornada completa

Descripción de la vacante

Strategic Staffing Solutions, Inc. is seeking a Senior Application Security Engineer to provide expertise across the AppSec platform portfolio. The role focuses on policy implementation, vulnerability analysis, and secure coding guidance while enabling developers to ship secure software.

The ideal candidate will manage SAST, SCA, API Security, DAST, IaC and Mobile Security testing, administer AppSec tooling, and collaborate with DevSecOps teams within a hybrid TX-based environment.

Formación

• Deep understanding of Secure SDLC and Application Security practices.
• Hands-on testing with SAST, SCA, API Security, DAST, IaC, and Mobile Security.
• Experience administering AppSec platforms and security tooling.
• Vulnerability validation, root-cause analysis, and false-positive assessments.
• Secure coding guidance and remediation support to development teams.
• Familiarity with GitLab, CI/CD pipelines, and automated security controls.
• Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.

Responsabilidades

• Support Application Security platforms, tooling, and policy implementation.
• Conduct vulnerability analysis, root-cause analysis, and false-positive assessments.
• Support SAST, SCA, API Security, DAST, IaC, and Mobile Security testing.
• Administer and support AppSec platforms and security tooling.
• Provide secure coding guidance and remediation support to development teams.
• Support platform escalations and developer enablement activities.
• Work with GitLab, CI/CD pipelines, and DevSecOps practices to support automated security controls.
• Leverage APIs, automation, and AI-assisted workflows to improve security operations.

Conocimientos

Secure SDLC

Application Security

Vulnerability analysis

False-positive analysis

DevSecOps

Automation

Herramientas

GitLab

CI/CD pipelines

Descripción del empleo

STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!

This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.

Beware of scams. S3 never asks for money during its onboarding process.

Job Title: Senior Application Security Engineer – Policy & Platform
Location: San Antonio, TX or Plano, TX
Work Schedule: Hybrid – 4 Days Onsite / 1 Day Remote
Contract Length: 12 Months

Job Ref #: JOB-248409

Position Summary

Seeking a Senior Application Security Engineer to provide technical expertise across the Application Security platform portfolio.

The AppSec Engineer will support application security tooling, policy implementation, vulnerability analysis, false-positive validation, platform escalations, and developer enablement activities.

Key Responsibilities

• Support Application Security platforms, tooling, and policy implementation.
• Conduct vulnerability analysis, root-cause analysis, and false-positive assessments.
• Support SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
• Administer and support AppSec platforms and security tooling.
• Provide secure coding guidance and vulnerability remediation support to development teams.
• Support platform escalations and developer enablement activities.
• Work with GitLab, CI/CD pipelines, and DevSecOps practices to support automated security controls.
• Leverage APIs, automation, and AI-assisted workflows to improve security operations.

Required Qualifications

• Deep understanding of Secure SDLC and Application Security practices.
• Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
• Experience administering and supporting AppSec platforms and security tooling.
• Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments.
• Experience providing secure coding guidance and remediation support to development teams.
• Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls.
• Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.
• Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials.