Senior AppSec Engineer: Build Secure SDLC & CI/CD

Mom Corps; Jacksonville (FL); Presencial; USD 92.000 - 107.000; Jornada completa

Descripción de la vacante

Corps Team is seeking a Senior Application Security Engineer for a 6 month, fully onsite contract in Jacksonville, FL. The role focuses on designing, implementing, and optimizing static and dynamic application security testing across the software development lifecycle.

Responsibilities include configuring SAST/DAST/SCA platforms, managing SonarQube, and integrating security testing into CI/CD pipelines, with reporting for technical and executive stakeholders.

Formación

• Bachelor’s degree in Information Security, Computer Science, Software Engineering, or related field preferred, or equivalent experience.
• 5+ years of cybersecurity, software engineering, DevSecOps, vulnerability management, or application security experience.
• 3+ years operating, administering, or integrating application security scanning technologies.
• Hands-on experience with SAST and DAST scanning configuration, execution, tuning, triage, and reporting.
• Familiarity with SCA, secure code review, vulnerability management, and remediation practices.

Responsabilidades

• Administer, configure, tune, and optimize application security platforms supporting SAST, DAST, and SCA.
• Manage SonarQube and code analysis tooling, including configurations, rules, and reporting.
• Develop and maintain application security scanning standards and runbooks.
• Integrate security testing into CI/CD and DevSecOps workflows with development teams.
• Triage and validate findings, reduce false positives, and document risk decisions.

Conocimientos

SAST

DAST

SCA

OWASP

Educación

Bachelor’s degree in Information Security, CS, or related field

Herramientas

SonarQube

CI/CD tooling

Descripción del empleo

Corps Team is seeking a Senior Application Security Engineer for a 6 month, fully onsite contract in Jacksonville, FL. The role focuses on designing, implementing, and optimizing static and dynamic application security testing across the software development lifecycle.

Responsibilities include configuring SAST/DAST/SCA platforms, managing SonarQube, and integrating security testing into CI/CD pipelines, with reporting for technical and executive stakeholders.