ALFA Financial Accounting Analyst

Job Summary

This is a remote position.

Job Title: Senior Application Security Engineer DevSecOps and CICD

Location: Remote, USA

Job Type: Contract

Estimated Duration: 12+ Months

Must Be Located In: Remote but must be located in Irving, TX, Chicago, IL, Peoria, IL, or Broomfield, CO

Must Have Skills/Attributes

• Agile
• API
• Artificial Intelligence (AI)
• DevSecOps
• Cloud
• SDLC
• Security
• Vulnerability
• OWASP Top 10

Experience Desired

Secure SDLC, DevSecOps, Agile, and Scrum methodologies (5-7 yrs); Security tooling (5-7 yrs); OWASP Top 10, API Security Top 10, authentication/authorization controls (5-7 yrs)

Education

Education Requirements

• Bachelor Degree in Computer Science, Cybersecurity, Information Systems, or a related field

Preferred Education

• Masters degree in Computer Science, Cybersecurity, Information Systems, or a related field

Cybersecurity Engineer Responsibilities

• Embeds application security into the SDLC by defining and improving security processes, standards, workflows, and Definition of Done criteria used by delivery teams
• Performs AI-assisted and traditional security assessments of applications, APIs, cloud workloads, repositories, and supporting infrastructure
• Manages repository scanning coverage source code analysis, secret scanning, dependency analysis, and infrastructure review and triages findings by exploitability, business impact, and severity
• Drives remediation from discovery through verified closure, and reduces security debt, dependency vulnerabilities, and software supply chain exposure across the application portfolio
• Builds security metrics, coverage reporting, and executive dashboards that give leadership visibility into remediation status and security posture trends
• Champions a security-first culture through coaching, knowledge sharing, and documented best practices, helping application teams hit security objectives and must-win business outcomes

Typical Task Breakdown

• Daily: review and triage new security findings from SAST, SCA, secret scanning, and dependency analysis; validate exploitability and prioritize by business impact
• Daily: manual validation and security testing using Burp Suite, browser developer tools, API testing platforms, and secure code review
• Daily/Weekly: drive remediation create and groom backlog items, assign ownership, retest fixes, collect evidence, and verify closure
• Weekly: participate in Scrum ceremonies (stand-up, backlog refinement, sprint planning, review) and maintain Agile work items, user stories, tasks, and defects
• Weekly: partner with application teams on code fixes, configuration changes, infrastructure updates, and compensating controls
• Monthly/Ongoing: security assessments of applications, APIs, and cloud workloads; metrics, coverage reporting, and executive dashboards; process and standards improvement
• Ongoing: use AI tooling responsibly to accelerate analysis, threat modeling, code review, and documentation within governance controls

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.