Application Security Engineer - Container Team (W2 ONLY NO C2C)

Matlen Silver is seeking an Application Security Engineer to support the Container Team on a hands-on, security engineering engagement. This role is contract with a 4+ month duration to hire, focused on container security, scanning tool rollout, and automation across the application lifecycle.

Role Overview

The Application Security Engineer will work onsite in Charlotte, NC and support efforts aligned to deployments in Atlanta, GA and Raleigh, NC. The position emphasizes container security implementation, configuration tuning for scanning accuracy and performance, and translating security findings into actionable guidance for development teams.

Responsibilities

• Apply hands-on container security knowledge and assist with deployment of scanning tools such as Wiz, Prisma, and Aqua Security.
• Troubleshoot complex scanning issues and optimize configurations to improve accuracy and performance.
• Perform vulnerability triage and support risk prioritization using strong analytical skills.
• Consult with development teams and clearly communicate technical findings, maintaining strong communication practices.

Required Skills

• Hands-on experience with container security and deployment of scanning tools (for example, Wiz, Prisma, Aqua Security).
• Proficiency in scripting languages for automation and tool integration: Python, Bash, or PowerShell.
• Deep understanding of the secure software development lifecycle (SDLC) and common vulnerabilities, including OWASP Top 10.
• Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
• Strong analytical skills for vulnerability triage and risk prioritization.
• Excellent communication skills for consulting with development teams and explaining technical findings.
• Experience integrating security tools into CI/CD pipelines.
• Familiarity with cloud-native security in AWS, Azure, and GCP, plus container orchestration with Kubernetes.
• Exposure to DevSecOps practices and security automation frameworks.
• Relevant certifications such as OSWE, GWAPT, or CSSLP.

Technology Focus

Wiz, Prisma, Aqua Security, Python, Bash, PowerShell, OWASP Top 10, CI/CD, AWS, Azure, GCP, Kubernetes, DevSecOps, OSWE, GWAPT, CSSLP

Contract Details

• Job type: Contract
• Duration: 4+ months, contract-to-hire
• Location: Charlotte, NC (onsite)
• Additional locations mentioned: Atlanta, GA and Raleigh, NC
• Engagement requirement: W2 only (no C2C)

Benefits

• Health, vision, and dental insurance (single and family coverage)
• 401(k) plan with employee contributions only

Non-Negotiable Qualifications

• Hands-on experience with container security and deployment of scanning tools (for example, Wiz, Prisma, Aqua Security).
• Proficiency in scripting languages (Python, Bash, or PowerShell) for automation and tool integration.
• Deep understanding of SDLC and common vulnerabilities (OWASP Top 10).
• Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
• Strong analytical skills for vulnerability triage and risk prioritization.
• Excellent communication skills for consulting with development teams and explaining technical findings.

Preferred Qualifications

• Experience integrating security tools into CI/CD pipelines.
• Familiarity with cloud-native security (AWS, Azure, GCP) and container orchestration (Kubernetes).
• Exposure to DevSecOps practices and security automation frameworks.
• Relevant certifications such as OSWE, GWAPT, or CSSLP.