Application Security Engineer

Responsibilities

• Perform application security testing and vulnerability assessments for web applications, APIs, services, and containers
• Support automated security scanning and maintain security scanning tools within CI/CD pipelines
• Document, triage, track, and validate vulnerabilities through remediation and closure
• Provide technical guidance to development teams on secure coding practices and remediation
• Support DevSecOps tool integration, automation, and the implementation of automated security gates
• Develop proof-of-concept secure reference implementations and utility applications to demonstrate best practices
• Monitor compliance with application security standards and support Zero Trust, NIST, CISA, and CIS frameworks
• Collect and maintain security assessment data, scan results, and operational metrics

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or a related field
• Minimum 4 years of professional IT experience plus 4 years of experience in application security, cybersecurity, or DevSecOps
• Experience with SAST, DAST, SCA, container scanning, and dependency security
• Experience integrating security controls into CI/CD pipelines and DevSecOps workflows
• Experience developing proof-of-concept applications, scripts, or API-based integrations
• Knowledge of Zero Trust, NIST, CISA, CIS, and OWASP frameworks

Preferred Qualifications

• Experience with tools such as SonarQube, Nexus IQ, Checkmarx, and Twistlock
• Ability to build proof-of-concept applications in Java/Spring Boot, Node.js, Python, Ruby, or .NET
• Experience with Kubernetes and container security practices
• Proficiency with Splunk, New Relic, and Harness CI/CD platforms

About the Company

Ardent supports the federal government's most critical national security and defense priorities, helping protect the nation and advance technologies that keep America secure.