Senior Application Security Engineer – Policy & Platform
Job Description
The Senior Application Security Engineer – Policy & Platform will provide technical support across the Application Security platform portfolio, helping implement security policies and improve how application vulnerabilities are identified and validated. This is a hybrid contract role based in Plano, TX.
Role Overview
In this position, you will support Application Security platforms and tooling, including vulnerability analysis, false-positive validation, and platform escalations. The role also supports developer enablement and works closely with teams using DevSecOps practices to advance automated security controls.
Responsibilities
- Support Application Security platforms, tooling, and policy implementation.
- Perform vulnerability analysis, root-cause analysis, and false-positive assessments.
- Support security testing across SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security.
- Administer and support AppSec platforms and security tooling.
- Provide secure coding guidance and support vulnerability remediation to development teams.
- Support platform escalations and developer enablement activities.
- Work with GitLab and CI/CD pipelines to support automated security controls using DevSecOps practices.
- Leverage APIs, automation, and AI-assisted workflows to improve security operations.
Required Qualifications
- Deep understanding of Secure SDLC and Application Security practices.
- Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
- Experience administering and supporting AppSec platforms and security tooling.
- Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments.
- Experience providing secure coding guidance and remediation support to development teams.
- Familiarity with GitLab, CI/CD pipelines, DevSecOps, and automated security controls.
- Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.
- Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials.
Technologies
- SAST
- SCA
- API Security
- DAST
- Infrastructure-as-Code (IaC)
- Mobile Security
- GitLab
- CI/CD pipelines
- DevSecOps
- APIs
- AI-assisted workflows
- CSSLP, CISSP, GWAPT, GWEB
Contract Details, Location, and Schedule
- Job type: Contract
- Contract duration: 12 Months
- Location: San Antonio, TX or Plano, TX (hybrid); Hybrid remote in Plano, TX 75023
- Work schedule: Hybrid – 4 Days Onsite / 1 Day Remote
Compensation and Work Authorization
- Pay: USD 60–66 per hour on W2
- W2 requirement: MUST be worked on a W2 Only. No C2C eligibility for this position.
- Visa sponsorship: Visa Sponsorship is Available!
About the Hiring Organization
Strategic Staffing Solutions has an opening for a contract role focused on Application Security platform support, policy implementation, and developer enablement within a DevSecOps environment.