Senior Application Security Engineer – DevSecOps, CICD

Job not on LinkedIn

🔥 12 hours ago

⛰️ Colorado, Illinois, +1 more states – Remote

⛰️ Colorado – Remote 🌽 Illinois – Remote 🤠 Texas – Remote

⏳ Contract/Temporary

🟠 Senior

💻 Application Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

3Core Systems, Inc

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2004

🤝 B2B

💼 Consulting

👥 HR Tech

B2B • Consulting • HR Tech

3Core Systems, Inc. is an SAP Silver Partner specializing in the delivery of integrated Digital HR solutions. The company focuses on optimizing SAP SuccessFactors for HR organizations, helping them solve immediate pain points while transforming their business objectives to achieve key performance indicators (KPIs). 3Core Systems provides a range of services including implementation, project management, consulting, and application management support, tailored to improve the efficiency of HR processes and enhance overall performance.

📋 Description

• Embed application security into the SDLC by defining and improving security processes, standards, workflows, and Definition of Done criteria • Perform AI-assisted and traditional security assessments of applications, APIs, cloud workloads, repositories, and supporting infrastructure • Manage repository scanning coverage, including source code analysis, secret scanning, dependency analysis, and infrastructure review • Triage findings by exploitability, business impact, and severity • Drive remediation from discovery through verified closure • Reduce security debt, dependency vulnerabilities, and software supply chain exposure across the application portfolio • Build security metrics, coverage reports, and executive dashboards • Champion a security-first culture through coaching, knowledge sharing, and documented best practices • Review and triage new findings from SAST, SCA, secret scanning, and dependency analysis • Conduct manual validation and security testing using Burp Suite, browser developer tools, API testing platforms, and secure code review • Create and groom backlog items, assign ownership, retest fixes, collect evidence, and verify closure • Participate in Scrum ceremonies and maintain Agile work items, user stories, tasks, and defects • Partner with application teams on code fixes, configuration changes, infrastructure updates, and compensating controls • Conduct ongoing security assessments and improve processes and standards • Use AI tooling responsibly for analysis, threat modeling, code review, and documentation within governance controls • Track emerging threats and AI-related security risks

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field • 5–7 years of hands-on application security/DevSecOps experience • 5–7 years of experience with Secure SDLC, DevSecOps, Agile, and Scrum methodologies • 5–7 years of experience with security tooling • Strong working understanding of Secure SDLC, DevSecOps, Agile, and Scrum methodologies • Experience with Burp Suite, GitHub Advanced Security, CodeQL, SAST, SCA, secret scanning, dependency analysis, and CI/CD security tooling • Ability to read, analyze, test, and modify production application code in Java and Python • Knowledge of OWASP Top 10, API Security Top 10, authentication/authorization controls, secure coding principles, and common attack techniques • Knowledge of cloud security, identity and access management, and modern application architectures • Ability to use AI-assisted development and security tools safely and effectively • Experience with vulnerability triage and validation, including exploitability, business impact, severity, compensating controls, and remediation guidance • Experience developing security metrics, coverage reporting, and executive dashboards • Excellent communication, stakeholder management, presentation, and documentation skills • Ability to work independently across multiple applications, teams, portfolios, and technology stacks • Strong problem-solving skills balancing security, usability, operational impact, and business objectives • Ability to collaborate with and influence architects, developers, DevOps, product owners, and business stakeholders • Ability to coach others and share knowledge • Comfort operating within Scrum/Agile delivery and managing personal work items

🏖️ Benefits

• Contract engagement with an estimated duration of 12+ months