Application Security Engineer

Job Summary

A company is looking for an Application Security Tooling Engineer to enhance application security scanning across the software development life cycle.

Key Responsibilities

• Deploy, configure, and maintain application security tools like Sonatype, Fortify, StackRox, and Burp Suite
• Integrate security tools into CI/CD pipelines and establish operational guidelines
• Provide actionable security findings and guidance to engineering teams while mentoring other AppSec professionals

Required Qualifications

• Active Secret clearance (Interim Secret acceptable)
• 5+ years of experience in application security engineering and/or DevSecOps in regulated environments
• Hands-on experience with Sonatype, Fortify, StackRox, and Burp Suite
• Strong CI/CD integration and automation skills
• Knowledge of secure SDLC, container/Kubernetes security, and Linux administration