Senior DevSecOps Engineer - Secure Java & CI/CD

DKMRBH Inc; City of Albany (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

DKMRBH Inc. is seeking an experienced Application Security Engineer to join our healthcare technology environment in Albany, NY.

You will collaborate with development teams to identify and remediate security vulnerabilities, review code and architecture changes, and integrate security tools into CI/CD pipelines. The ideal candidate has strong Java/web development experience, hands-on SAST/DAST, Fortify, and SonarQube expertise, plus DevSecOps and SDLC security know-how.

Qualifications

• 8+ years of IT experience.
• 5+ years of software development as Developer or Architect.
• 3+ years of Application Security Engineering experience.
• BS CS or related field or equivalent experience.
• Certifications in CISSP/CEH are preferred.

Responsibilities

• Identify and remediate application security vulnerabilities with development teams.
• Establish application security checkpoints throughout the SDLC.
• Perform risk-based security assessments and penetration testing.
• Conduct SAST and DAST using Fortify, SonarQube and similar tools.
• Review code commits, PRs, and architecture changes for security issues.
• Integrate security tooling into CI/CD pipelines and DevSecOps practices.
• Develop security training materials for engineering teams.
• Provide security status updates and remediation reports to leadership.

Skills

Java/Web Development

Secure coding

Application Security

DevSecOps/SDLC

SAST/DAST

Fortify/SonarQube

CI/CD pipelines

Vulnerability remediation

Security training

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Fortify

SonarQube

CI/CD tooling

Job description

DKMRBH Inc. is seeking an experienced Application Security Engineer to join our healthcare technology environment in Albany, NY.

You will collaborate with development teams to identify and remediate security vulnerabilities, review code and architecture changes, and integrate security tools into CI/CD pipelines. The ideal candidate has strong Java/web development experience, hands-on SAST/DAST, Fortify, and SonarQube expertise, plus DevSecOps and SDLC security know-how.