Application Security Engineer

Resolution Technologies is hiring an Application Security Engineer to strengthen application security across Salesforce, .NET, and Azure App Services. This hybrid role is based in Atlanta, GA and centers on building secure SDLC practices, running security testing, and embedding security tooling into CI/CD workflows aligned to NIST controls.

You will be responsible for evaluating application security at both the code and platform levels, including Salesforce security configuration and the way modern development pipelines apply automated analysis. Work will involve threat modeling, risk assessment, penetration testing, and ongoing DevSecOps tool tuning to maintain measurable security coverage.

Responsibilities

• Review Apex code, Visualforce pages, and Lightning components for security vulnerabilities.
• Ensure correct Salesforce security configuration, including profiles, permission sets, role hierarchies, and sharing rules.
• Implement and monitor field-level security, object-level access, and record-level access controls.
• Validate secure integration patterns for external APIs and third-party apps within Salesforce.
• Enforce OAuth scopes, connected app policies, and IP restrictions.
• Conduct security health checks and Salesforce Shield audits.
• Align Salesforce security architecture with NIST 800-53 and NIST CSF controls.
• Collaborate with development teams to integrate security best practices into the SDLC.
• Perform secure code reviews across Salesforce, .NET, and Azure-based applications.
• Design and review application architecture to ensure alignment with NIST controls.
• Perform threat modeling and risk assessments for new and existing applications.
• Maintain and enhance security integrations with Git, Azure DevOps, and other version control systems.
• Perform manual and automated penetration testing of web applications and APIs.
• Identify and remediate vulnerabilities in Salesforce customizations, .NET codebases, and Azure-hosted services.
• Own configuration, tuning, and maintenance for DevSecOps tools such as SonarQube, Checkmarx, Veracode, and Fortify.
• Monitor and report on security tool performance and coverage.
• Map application security controls to NIST standards and support audit readiness.
• Document security requirements and ensure traceability to NIST control families.
• Partner with engineering, QA, and operations teams to drive security awareness and training.
• Provide guidance on secure coding standards and remediation strategies.
• Support incident response related to application vulnerabilities.
• Contribute to risk assessments and mitigation planning for both new and existing applications.

Requirements

• Bachelor degree in Computer Science, Information Security, or related field (or equivalent experience).
• 7+ years of experience in application security, DevSecOps, or related roles.
• Strong understanding of secure coding practices in .NET and Apex (Salesforce).
• Experience with Salesforce security architecture and Azure App Services.
• Proficiency in CI/CD pipelines and integrating security tools into Git and Azure DevOps workflows.
• Familiarity with NIST 800-53, NIST CSF, and other cybersecurity frameworks.
• Hands-on experience with SAST, DAST, SCA, and container security tools.
• Strong scripting skills (e.g., PowerShell, Python, Bash) for automation.

Technologies

• Salesforce, Apex, Visualforce, Lightning components
• OAuth, Salesforce Shield
• NIST 800-53, NIST CSF
• DevSecOps, SDLC
• Git, Azure DevOps
• SonarQube, Checkmarx, Veracode, Fortify
• SAST, DAST, SCA, container security tools
• PowerShell, Python, Bash
• .NET, Azure App Services

Preferred Qualifications

• Certifications such as OSCP, GWAPT, CSSLP, or Salesforce Security Specialist.