Security Engineer
Application Security
Cloud Platforms
Container Security
Cybersecurity Operations
Cybersecurity Tools
Data Security
Endpoint Security
Facilities Management
Iam Access Control
Identity and Access Management
Incident Management
Incident Response
Information Security
InfoSec
Project Management
Risk Management
Security
Security Automation
Security Compliance
Security Standards
Security Testing
Software Security
Job Description
This Application Security Engineer role supports the design, implementation, and ongoing operation of security capabilities across servers, applications, and identity systems. The position focuses on secure baseline enforcement, application and dependency security testing, and coordinated vulnerability remediation in a healthcare environment.
Location and Assignment Details
- Location: Houston, TX (onsite)
- Duration: 13 Months + Extension
- Job ID: J54378
- Employment Type: W-2, 1099, C2C
- Work Authorization: US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other
- Domain Exposure: Healthcare
- Client: To Be Discussed Later
Compensation
- Salary: USD 77 per hour
Responsibilities
- Implement and maintain secure server baselines for Windows, Linux, and Cloud, aligned with CIS Benchmarks and security standards.
- Perform security assessments including SAST, DAST, and Software Composition Analysis (SCA) for internal and third-party applications.
- Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
- Manage Identity Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
- Investigate and respond to server and application security incidents.
- Integrate security controls into CI/CD pipelines, including container scanning and secrets management.
- Ensure security log and telemetry coverage by integrating EDR, Host Intrusion Detection System (HIDS), and application events with SIEM.
- Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
- Support patch management, security reviews, threat modeling, and secure release processes; develop security standards, procedures, and technical documentation; provide risk-based recommendations to stakeholders.
Requirements
- Strong understanding of application security concepts and practices.
- Experience with SAST, DAST, and SCA tooling.
- Proficiency in managing AWS IAM Idaas solutions and practices.
- Experience with CI/CD pipeline tools and integrating security into the development lifecycle.
- Familiarity with security logging and monitoring tools, particularly SIEM.
- Preferred: Experience with cloud security practices and tools.
- Knowledge of Docker security and Kubernetes.
- Familiarity with Threat Modelling methodologies.
- Experience with security frameworks and compliance standards such as NIST and ISO 27001.
- Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
- Experience: 12 years in application security or related fields.
- Relevant certifications preferred: CISSP, CEH, or CASE.
- Strong analytical and problem-solving skills; excellent communication and collaboration skills.
Relevant Technologies
- Windows, Linux, CIS Benchmarks
- SAST, DAST, Software Composition Analysis (SCA)
- IAM, Multi Factor Authentication (MFA)
- CI/CD, container scanning, secrets management
- EDR, Host Intrusion Detection System (HIDS), SIEM
- Docker, Kubernetes
- AWS IAM Idaas
- NIST, ISO 27001
- Threat Modelling
Similar Jobs
