Security Engineer

Robotics Technologies is seeking a Security Engineer with an application security focus to help implement secure server baselines, perform security assessments, and manage identity and access controls. The role emphasizes proactive risk identification and remediation across servers, applications, and cloud environments.

Location and Employment Details

• Location: Houston, TX (onsite)
• Salary: USD 77 - 77 per hourly
• Job ID: J54378
• Duration: 13 Months + Extension
• Employment type: W-2, 1099, C2C
• Work authorization: US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Role Responsibilities

• Implement and maintain secure server baselines for Windows, Linux, and Cloud, aligned with CIS Benchmarks and established security standards.
• Run security assessments for both in-house and third-party applications, including SAST, DAST, and SCA.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity Access Management (IAM) activities, including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
• Investigate and respond to server and application security incidents.
• Embed security controls into CI/CD pipelines, including container scanning and secrets management.
• Ensure integration of security logs, EDR / Host Intrusion Detection System (HIDS) telemetry, and application events into the SIEM environment.
• Review configurations for servers, applications, Docker, and Kubernetes to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes; contribute to security standards, procedures, and technical documentation, and provide risk-based recommendations to stakeholders.

Required and Preferred Qualifications

• Strong understanding of application security concepts and practices.
• Experience with SAST, DAST, and SCA tooling.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, especially SIEM.
• Preferred: Cloud security practices and tools.
• Knowledge: Docker security and Kubernetes.
• Familiarity: Threat Modelling methodologies.
• Experience with security frameworks and compliance standards: NIST, ISO 27001.
• Education: Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience: 12 years in application security or related fields.
• Relevant certifications (preferred): CISSP, CEH, or CASE.
• Skills: strong analytical and problem-solving skills; excellent communication and collaboration.

Technology Focus

• Windows, Linux, CIS Benchmarks
• SAST, DAST, Software Composition Analysis (SCA)
• IAM, Multi Factor Authentication (MFA)
• CI/CD, container scanning, secrets management
• EDR, Host Intrusion Detection System (HIDS), SIEM
• Docker, Kubernetes
• AWS IAM Idaas
• NIST, ISO 27001
• Threat Modelling

Domain Exposure

• Healthcare

Client Information

• Client: To Be Discussed Later