Application Security Engineer
Application Security
Application Security Engineering
Application Security Testing
Automated Security Testing
Cis Benchmarks
Cloud Platforms
Container Security
Cyber Security
Cybersecurity Operations
Cybersecurity Tools
Dynamic Application Security Testing
Endpoint Security
Hids
Identity and Access Management
Incident Response
Information Security
InfoSec
Log Management
Secret Management
Security
Security Compliance
Security Information And Event Management
Security Monitoring
Security Operations
Security Standards
Security Testing
Software Composition Analysis
Software Security
Static Application Security Testing
Job Description
Application Security Engineer role in Houston, TX (onsite) focused on securing servers and applications while integrating security into CI/CD and centralized monitoring.
- Location: Houston, TX (onsite)
- Job type: contract
- Salary: USD 75 per hour
Responsibilities
- Implement and maintain secure server baselines for Windows, Linux, and Cloud, aligned with CIS Benchmarks and security standards
- Perform application security assessments using SAST, DAST, and SCA for both in-house and third-party applications
- Identify, prioritize, and coordinate vulnerability remediation across applications, APIs, databases, and infrastructure
- Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA)
- Investigate and respond to server and application security incidents
- Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management
- Ensure security visibility by integrating security logs, EDR/HIDS telemetry, and application events into the SIEM system
- Review security-relevant configurations for servers, applications, Docker, and Kubernetes to identify and mitigate risks
- Support patch management, security reviews, threat modeling, and secure release processes
- Develop security standards, procedures, and technical documentation; provide risk-based recommendations to stakeholders
Requirements
- Strong understanding of application security concepts and practices
- Experience with SAST, DAST, and SCA tools
- Proficiency in managing AWS IAM Idaas solutions and practices
- Experience with CI/CD pipeline tools and integrating security into the development lifecycle
- Familiarity with security logging and monitoring tools, particularly SIEM
Technologies
- Windows, Linux, Cloud
- CIS Benchmarks
- Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA)
- Identity & Access Management (IAM), Multi Factor Authentication (MFA)
- Continuous Integration/Continuous Deployment (CI/CD), container scanning, secrets management
- Endpoint Detection and Response (EDR), Host Intrusion Detection System (HIDS), Security Information and Event Management (SIEM)
- Docker, Kubernetes
- AWS IAM Idaas
Preferred Skills
- Experience with cloud security practices and tools
- Knowledge of Docker security and Kubernetes
- Familiarity with Threat Modelling methodologies
- Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001)
Similar Jobs
$84k - $126k/yr
Full time
Application Security
Application Security Testing
Automated Security Testing