Senior AppSec Engineer: Build Secure SDLC & CI/CD

Corps Team; Jacksonville (FL); On-site; USD 92,000 - 107,000; Full time

Job summary

Corps Team is seeking a Senior Application Security Engineer for a 6 month, fully onsite contract in Jacksonville, FL. The role focuses on designing, implementing, and optimizing static and dynamic application security testing across the software development lifecycle.

Responsibilities include configuring SAST/DAST/SCA platforms, managing SonarQube, and integrating security testing into CI/CD pipelines, with reporting for technical and executive stakeholders.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Software Engineering, or related field preferred, or equivalent experience.
• 5+ years of cybersecurity, software engineering, DevSecOps, vulnerability management, or application security experience.
• 3+ years operating, administering, or integrating application security scanning technologies.
• Hands-on experience with SAST and DAST scanning configuration, execution, tuning, triage, and reporting.
• Familiarity with SCA, secure code review, vulnerability management, and remediation practices.

Responsibilities

• Administer, configure, tune, and optimize application security platforms supporting SAST, DAST, and SCA.
• Manage SonarQube and code analysis tooling, including configurations, rules, and reporting.
• Develop and maintain application security scanning standards and runbooks.
• Integrate security testing into CI/CD and DevSecOps workflows with development teams.
• Triage and validate findings, reduce false positives, and document risk decisions.

Skills

SAST

DAST

SCA

OWASP

Education

Bachelor’s degree in Information Security, CS, or related field

Tools

SonarQube

CI/CD tooling

Job description

Corps Team is seeking a Senior Application Security Engineer for a 6 month, fully onsite contract in Jacksonville, FL. The role focuses on designing, implementing, and optimizing static and dynamic application security testing across the software development lifecycle.

Responsibilities include configuring SAST/DAST/SCA platforms, managing SonarQube, and integrating security testing into CI/CD pipelines, with reporting for technical and executive stakeholders.