Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ardent

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2008

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Ardent is a premier technology firm serving the public sector, focused on delivering mission-critical solutions. They specialize in data science and analytics, digital transformation, and location intelligence, helping organizations to make better decisions, modernize their systems, and decode spatial data. Ardent is committed to defending against man-made and natural threats, providing effective solutions such as cloud applications, cybersecurity, and spatial data science. They work closely with federal agencies, including the Department of Homeland Security, to ensure national safety. Their solutions are tailored to thrive in complex environments, proven in case studies, and delivered with the speed and precision required by their clients' missions.

📋 Description

• Perform application security testing and vulnerability assessments across web applications, APIs, services, containers, dependencies, and delivery environments • Support automated security scanning and configure and maintain security scanning tools across development, build, test, release, and runtime activities • Document, triage, track, and validate vulnerabilities through remediation and closure • Maintain vulnerability status, remediation evidence, and closure documentation • Provide secure coding and remediation guidance to development teams • Support security tool and control integration within CI/CD pipelines • Implement automated security gates, policy enforcement, and reporting workflows • Integrate DevSecOps tools through APIs • Develop proof-of-concept secure reference implementations and sample applications • Maintain reusable secure design patterns and examples • Develop security utility applications, scripts, dashboards, integrations, and automation workflows • Monitor application security standards and controls aligned with Zero Trust, NIST, CISA, and CIS frameworks • Collect security assessment data, scan results, vulnerability evidence, remediation status, and operational metrics • Support enterprise DevSecOps, vulnerability reduction, secure software development, and application security modernization initiatives across USCIS programs • Collaborate with development, security, platform, operations, and other technical teams

🎯 Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field • Minimum of 4 years of professional IT experience plus 4 years supporting application security, cybersecurity, DevSecOps, or closely related subject matter requirements • Advanced technical knowledge of application security technologies, specialized applications, and operational environments • Experience performing technical and functional analysis, system integration, implementation, documentation, and technical guidance for complex application security or DevSecOps initiatives • Experience with application security testing and vulnerability assessment • Experience with secure coding practices and providing remediation guidance to development teams • Experience with SAST, DAST, SCA, container scanning, and dependency security • Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows • Experience developing proof-of-concept applications, secure reference implementations, utility applications, scripts, dashboards, or API-based integrations • Experience with vulnerability management workflows, including triage, documentation, remediation tracking, validation, and closure • Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices • Experience collaborating with development, security, platform, operations, and other technical teams • Willingness to undergo the government-issued background investigation process

🏖️ Benefits

• Competitive pay • Comprehensive health coverage • Flexible PTO • Federal holidays off • Tuition reimbursement • Professional development support • Wellness stipends • Flexible work arrangements