Matlen Silver is seeking an Application Security Engineer to support the Container Team on a hands-on, security engineering engagement. This role is contract with a 4+ month duration to hire, focused on container security, scanning tool rollout, and automation across the application lifecycle.
Role Overview
The Application Security Engineer will work onsite in Charlotte, NC and support efforts aligned to deployments in Atlanta, GA and Raleigh, NC. The position emphasizes container security implementation, configuration tuning for scanning accuracy and performance, and translating security findings into actionable guidance for development teams.
Responsibilities
- Apply hands-on container security knowledge and assist with deployment of scanning tools such as Wiz, Prisma, and Aqua Security.
- Troubleshoot complex scanning issues and optimize configurations to improve accuracy and performance.
- Perform vulnerability triage and support risk prioritization using strong analytical skills.
- Consult with development teams and clearly communicate technical findings, maintaining strong communication practices.
Required Skills
- Hands-on experience with container security and deployment of scanning tools (for example, Wiz, Prisma, Aqua Security).
- Proficiency in scripting languages for automation and tool integration: Python, Bash, or PowerShell.
- Deep understanding of the secure software development lifecycle (SDLC) and common vulnerabilities, including OWASP Top 10.
- Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
- Strong analytical skills for vulnerability triage and risk prioritization.
- Excellent communication skills for consulting with development teams and explaining technical findings.
- Experience integrating security tools into CI/CD pipelines.
- Familiarity with cloud-native security in AWS, Azure, and GCP, plus container orchestration with Kubernetes.
- Exposure to DevSecOps practices and security automation frameworks.
- Relevant certifications such as OSWE, GWAPT, or CSSLP.
Technology Focus
Wiz, Prisma, Aqua Security, Python, Bash, PowerShell, OWASP Top 10, CI/CD, AWS, Azure, GCP, Kubernetes, DevSecOps, OSWE, GWAPT, CSSLP
Contract Details
- Job type: Contract
- Duration: 4+ months, contract-to-hire
- Location: Charlotte, NC (onsite)
- Additional locations mentioned: Atlanta, GA and Raleigh, NC
- Engagement requirement: W2 only (no C2C)
Benefits
- Health, vision, and dental insurance (single and family coverage)
- 401(k) plan with employee contributions only
Non-Negotiable Qualifications
- Hands-on experience with container security and deployment of scanning tools (for example, Wiz, Prisma, Aqua Security).
- Proficiency in scripting languages (Python, Bash, or PowerShell) for automation and tool integration.
- Deep understanding of SDLC and common vulnerabilities (OWASP Top 10).
- Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
- Strong analytical skills for vulnerability triage and risk prioritization.
- Excellent communication skills for consulting with development teams and explaining technical findings.
Preferred Qualifications
- Experience integrating security tools into CI/CD pipelines.
- Familiarity with cloud-native security (AWS, Azure, GCP) and container orchestration (Kubernetes).
- Exposure to DevSecOps practices and security automation frameworks.
- Relevant certifications such as OSWE, GWAPT, or CSSLP.
