Senior Application Security Engineer – Policy & Platform

Cybersecurity Jobs; Plano (TX); Hybrid; USD 83,000 - 91,000; Full time

Job summary

Strategic Staffing Solutions is seeking a Senior Application Security Engineer – Policy & Platform for a 12-month hybrid contract based in Plano, TX (with San Antonio as an alternate location). You will support Application Security platforms, implement security policies, and enable developers within a DevSecOps environment.

You will perform vulnerability analysis, false-positive validation, and work with SAST, SCA, API Security, DAST, IaC, and Mobile Security testing.

Qualifications

• Deep understanding of Secure SDLC and application security practices.
• Hands-on testing across SAST, SCA, API Security, DAST, IaC, and Mobile Security.
• Experience administering AppSec platforms and tooling.
• Experience vulnerability validation, root-cause analysis, and false positives.
• Secure coding guidance and remediation support to development teams.
• Familiarity with GitLab, CI/CD, DevSecOps, and automated security controls.
• APIs, automation, and AI-assisted workflows to improve security operations.
• Certifications such as CSSLP, CISSP, GWAPT, GWEB or equivalent.

Responsibilities

• Support Application Security platforms, tooling, and policy implementation.
• Perform vulnerability analysis, root-cause analysis, and false-positive assessments.
• Support security testing across SAST, SCA, API Security, DAST, IaC, and Mobile Security.
• Administer and support AppSec platforms and security tooling.
• Provide secure coding guidance and remediation support to development teams.
• Support platform escalations and developer enablement activities.
• Work with GitLab and CI/CD pipelines to support automated security controls.
• Leverage APIs, automation, and AI-assisted workflows to improve security operations.

Skills

Secure SDLC

Vulnerability analysis

DevSecOps

Automation

APIs

Education

CSSLP

CISSP

GWAPT

GWEB

Tools

GitLab

CI/CD pipelines

AI-assisted workflows

Job description

The Senior Application Security Engineer – Policy & Platform will provide technical support across the Application Security platform portfolio, helping implement security policies and improve how application vulnerabilities are identified and validated. This is a hybrid contract role based in Plano, TX.

Role Overview

In this position, you will support Application Security platforms and tooling, including vulnerability analysis, false-positive validation, and platform escalations. The role also supports developer enablement and works closely with teams using DevSecOps practices to advance automated security controls.

Responsibilities

• Support Application Security platforms, tooling, and policy implementation.
• Perform vulnerability analysis, root-cause analysis, and false-positive assessments.
• Support security testing across SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security.
• Administer and support AppSec platforms and security tooling.
• Provide secure coding guidance and support vulnerability remediation to development teams.
• Support platform escalations and developer enablement activities.
• Work with GitLab and CI/CD pipelines to support automated security controls using DevSecOps practices.
• Leverage APIs, automation, and AI-assisted workflows to improve security operations.

Required Qualifications

• Deep understanding of Secure SDLC and Application Security practices.
• Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
• Experience administering and supporting AppSec platforms and security tooling.
• Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments.
• Experience providing secure coding guidance and remediation support to development teams.
• Familiarity with GitLab, CI/CD pipelines, DevSecOps, and automated security controls.
• Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.
• Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials.

Technologies

• SAST
• SCA
• API Security
• DAST
• Infrastructure-as-Code (IaC)
• Mobile Security
• GitLab
• CI/CD pipelines
• DevSecOps
• APIs
• AI-assisted workflows
• CSSLP, CISSP, GWAPT, GWEB

Contract Details, Location, and Schedule

• Job type: Contract
• Contract duration: 12 Months
• Location: San Antonio, TX or Plano, TX (hybrid); Hybrid remote in Plano, TX 75023
• Work schedule: Hybrid – 4 Days Onsite / 1 Day Remote

Compensation and Work Authorization

• Pay: USD 60–66 per hour on W2
• W2 requirement: MUST be worked on a W2 Only. No C2C eligibility for this position.
• Visa sponsorship: Visa Sponsorship is Available!

About the Hiring Organization

Strategic Staffing Solutions has an opening for a contract role focused on Application Security platform support, policy implementation, and developer enablement within a DevSecOps environment.