Application Security Engineer

Job not on LinkedIn

🕒 August 12

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 20%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Ardent

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2008

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Ardent is a premier technology firm serving the public sector, focused on delivering mission-critical solutions. They specialize in data science and analytics, digital transformation, and location intelligence, helping organizations to make better decisions, modernize their systems, and decode spatial data. Ardent is committed to defending against man-made and natural threats, providing effective solutions such as cloud applications, cybersecurity, and spatial data science. They work closely with federal agencies, including the Department of Homeland Security, to ensure national safety. Their solutions are tailored to thrive in complex environments, proven in case studies, and delivered with the speed and precision required by their clients' missions.

📋 Description

• Perform application security testing and vulnerability assessments across web applications, APIs, services, containers, dependencies, and delivery environments • Support automated security scanning and maintain security scanning tools across development, build, test, release, and runtime activities • Document, triage, track, and validate vulnerabilities through remediation and closure • Maintain vulnerability status, remediation evidence, and closure documentation • Provide development teams with secure coding guidance and remediation recommendations • Support security tool and control integration within CI/CD pipelines • Implement automated security gates, policy enforcement, and reporting workflows • Integrate DevSecOps tools through APIs • Develop proof-of-concept secure reference implementations demonstrating authentication, authorization, logging, dependency management, secrets handling, containerization, API security, and secure CI/CD workflows • Develop reusable security patterns and examples • Identify process and technology gaps between development and security teams • Build utility applications, scripts, dashboards, integrations, and automation workflows for vulnerability management and DevSecOps operations • Monitor alignment with application security standards and controls, including Zero Trust, NIST, CISA, and CIS frameworks • Collect security assessment data, scan results, vulnerability evidence, remediation status, and operational metrics • Support continuous monitoring, vulnerability reduction, secure software development, and application security modernization initiatives across USCIS programs • Collaborate with development, security, platform, operations, and other technical teams

🎯 Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field • Minimum of 4 years of professional IT experience, plus 4 years of experience supporting application security, cybersecurity, DevSecOps, or closely related subject matter requirements • Advanced technical knowledge of application security technologies, specialized applications, and operational environments • Experience performing technical and functional analysis, system integration, implementation, documentation, and technical guidance for complex application security or DevSecOps initiatives • Experience with application security testing and vulnerability assessment • Experience with secure coding practices and providing remediation guidance to development teams • Experience with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), container scanning, and dependency security • Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows • Experience developing proof-of-concept applications, secure reference implementations, utility applications, scripts, dashboards, or API-based integrations • Experience with vulnerability management workflows, including triage, documentation, remediation tracking, validation, and closure • Knowledge of application security frameworks and guidance, including Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices • Experience working collaboratively with development, security, platform, operations, and other technical teams • Must be willing to undergo the government issued background investigation process • Preferred: Review and interpret security scan results from SonarQube, Nexus IQ, Checkmarx, and Twistlock • Preferred: Configure and support Nexus Repository Firewall policies and dependency blocking workflows • Preferred: Analyze CVEs, CVSS scores, vulnerable dependency paths, and recommended component versions • Preferred: Build proof-of-concept applications using Java/Spring Boot, Node.js, Python, Ruby, or .NET • Preferred: Create automation scripts or utility applications using DevSecOps tool APIs • Preferred: Develop integrations that collect, normalize, and report security findings from multiple tools • Preferred: Support Kubernetes and container security practices • Preferred: Use Splunk and New Relic data for application security monitoring and operational visibility • Preferred: Work with Harness or similar CI/CD platforms • Preferred: Translate security framework requirements into practical application security practices

🏖️ Benefits

• Equal opportunity employment • Encouragement for Veterans and people with disabilities to apply

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume