EngineerJobs.io
← Back to all jobs

Job Description

Application Security Engineer role in Houston, TX (onsite) focused on securing servers and applications while integrating security into CI/CD and centralized monitoring.

  • Location: Houston, TX (onsite)
  • Job type: contract
  • Salary: USD 75 per hour

Responsibilities

  • Implement and maintain secure server baselines for Windows, Linux, and Cloud, aligned with CIS Benchmarks and security standards
  • Perform application security assessments using SAST, DAST, and SCA for both in-house and third-party applications
  • Identify, prioritize, and coordinate vulnerability remediation across applications, APIs, databases, and infrastructure
  • Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA)
  • Investigate and respond to server and application security incidents
  • Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management
  • Ensure security visibility by integrating security logs, EDR/HIDS telemetry, and application events into the SIEM system
  • Review security-relevant configurations for servers, applications, Docker, and Kubernetes to identify and mitigate risks
  • Support patch management, security reviews, threat modeling, and secure release processes
  • Develop security standards, procedures, and technical documentation; provide risk-based recommendations to stakeholders

Requirements

  • Strong understanding of application security concepts and practices
  • Experience with SAST, DAST, and SCA tools
  • Proficiency in managing AWS IAM Idaas solutions and practices
  • Experience with CI/CD pipeline tools and integrating security into the development lifecycle
  • Familiarity with security logging and monitoring tools, particularly SIEM

Technologies

  • Windows, Linux, Cloud
  • CIS Benchmarks
  • Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA)
  • Identity & Access Management (IAM), Multi Factor Authentication (MFA)
  • Continuous Integration/Continuous Deployment (CI/CD), container scanning, secrets management
  • Endpoint Detection and Response (EDR), Host Intrusion Detection System (HIDS), Security Information and Event Management (SIEM)
  • Docker, Kubernetes
  • AWS IAM Idaas

Preferred Skills

  • Experience with cloud security practices and tools
  • Knowledge of Docker security and Kubernetes
  • Familiarity with Threat Modelling methodologies
  • Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001)

Similar Jobs