Application Security Engineer

Job Summary

Supporting application security assessments and vulnerability management, the full-time remote Application Security Engineer will collaborate with development and security teams to identify risks, validate fixes, and enhance security automation across USCIS systems.

Key responsibilities:

• Perform application security testing and vulnerability assessments using approved tools and techniques
• Support automated security scanning and assist in configuring security scanning tools for CI/CD pipelines
• Document, track, and validate vulnerabilities while providing guidance on secure coding practices to development teams

Required qualifications:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field
• Minimum of 4 years of professional IT experience, including 4 years in application security or related areas
• Advanced technical knowledge of application security technologies and operational environments
• Experience with application security testing, vulnerability assessment, and secure coding practices
• Familiarity with integrating security controls into CI/CD pipelines and DevSecOps workflows