Senior Application Security Engineer – CI/CD & Forensics

Addison Group; Oklahoma City (OK); On-site; USD 115,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Addison Group in Oklahoma City is seeking an Application Security Engineer to strengthen application testing, embed security checks in development workflows, and support incident response and vulnerability management. The role blends hands-on security assessments with automation and process improvements.

The team focuses on reducing risks across applications, expanding forensics capabilities, and evolving security practices, with a hands-on approach and collaboration with engineering teams.

Qualifications

• At least five years of relevant experience; seven+ preferred.
• Experience with SAST and DAST.
• Familiarity with OWASP Top 10 and secure testing methods.
• Understanding CIA triad and security fundamentals.
• Experience embedding security testing in CI/CD pipelines.
• Ability to clearly explain findings to engineers.
• Experience in digital forensics, incident response or vulnerability management is a plus.

Responsibilities

• Incorporate application scanning tools into CI/CD workflows for automated security testing.
• Analyze scan results, validate weaknesses, and perform hands-on assessments.
• Partner with engineering to prioritize findings and guide remediation.
• Investigate security events and contribute to forensics, containment and recovery.
• Evaluate vulnerabilities and support remediation actions.
• Improve testing procedures and security workflows as the program matures.
• Apply security frameworks for consistent app assessments.
• Contribute to AI security testing initiatives.

Skills

CI/CD integration

Security testing

Threat analysis

Education

No degree required

Tools

SAST

DAST

Job description

Addison Group in Oklahoma City is seeking an Application Security Engineer to strengthen application testing, embed security checks in development workflows, and support incident response and vulnerability management. The role blends hands-on security assessments with automation and process improvements.

The team focuses on reducing risks across applications, expanding forensics capabilities, and evolving security practices, with a hands-on approach and collaboration with engineering teams.