Job Description

STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!

This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.

“Beware of scams. S3 never asks for money during its onboarding process.”

Job Title: Senior Application Security Engineer – Policy & Platform
Location: San Antonio, TX or Plano, TX
Work Schedule: Hybrid – 4 Days Onsite / 1 Day Remote
Contract Length: 12 Months

Job Ref #: JOB-248409

Position Summary

Seeking a Senior Application Security Engineer to provide technical expertise across the Application Security platform portfolio.

The AppSec Engineer will support application security tooling, policy implementation, vulnerability analysis, false-positive validation, platform escalations, and developer enablement activities.

Key Responsibilities

• Support Application Security platforms, tooling, and policy implementation.

• Conduct vulnerability analysis, root-cause analysis, and false-positive assessments.

• Support SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.

• Administer and support AppSec platforms and security tooling.

• Provide secure coding guidance and vulnerability remediation support to development teams.

• Support platform escalations and developer enablement activities.

• Work with GitLab, CI/CD pipelines, and DevSecOps practices to support automated security controls.

• Leverage APIs, automation, and AI-assisted workflows to improve security operations.

Required Qualifications

• Deep understanding of Secure SDLC and Application Security practices.

• Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.

• Experience administering and supporting AppSec platforms and security tooling.

• Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments.

• Experience providing secure coding guidance and remediation support to development teams.

• Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls.

• Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.

• Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials.