Application Security/DevSecOps Engineer

Shree Narayani Networking Solutions • Hopkins, MN

1d • Hybrid

About The Position

This Application Security Engineer will implement and support solutions/technologies used for Static Code Analysis (SCA) & Static Application Security Testing (SAST) using industry-leading tools. This role involves AppSec for AI using LLM-based scanning of source code, updating AI skills, frameworks, security testing, and application threat modeling. The engineer will lead initiatives to improve the application security detection program by fine-tuning tools, automating processes, and enhancing the integration of SAST, SCA, and DAST tools within the GitLab & Jenkins CI/CD pipeline. Responsibilities also include managing and supporting Docker containers, HELM charts, Rancher, cloud environments, and automation using Java, Groovy, and Python scripts. The role requires identifying opportunities to optimize security processes and recommending solutions for improvement and automation. Additionally, the engineer will support and participate in incident response and technical investigations as needed, ensuring adherence to compliance regulations and policies.

Requirements

• Application Security detection with SAST, SCA, DAST.
• GitLab & Jenkins integration.
• AI LLM Scanning, AI Skills & Agent security.
• Docker Container, HELM charts & cloud management.
• Automation with Java, Python & Groovy.

Nice To Haves

• Experience triaging application security vulnerabilities.
• Assessing severity level and false positives.
• Establishing risk associated with vulnerabilities based on the environment.
• Experience working with development teams on vulnerability remediation.
• Establishing best practices for developer efficiency and security.

Responsibilities

• Implement and support solutions/technologies for Static Code Analysis (SCA) & Static Application Security Testing (SAST).
• Perform AppSec for AI using LLM-based scanning of source code, update AI skills, frameworks, security testing, and application threat modeling.
• Lead initiatives to improve the application security detection program.
• Fine-tune security tools, automate processes, and improve integration of SAST, SCA, and DAST tools in GitLab & Jenkins CI/CD pipeline.
• Manage and support Docker containers, HELM charts, Rancher, and cloud environments.
• Utilize Java, Groovy, and Python scripts for automation.
• Optimize security processes and recommend solutions for improvement and automation.
• Support and participate in incident response and technical investigations.
• Ensure adherence to compliance regulations and policies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed