Senior Application Security Engineer – Policy & Platform

Location: San Antonio, Texas or Plano, Texas; hybrid schedule with 4 days onsite and 1 day remote

Company

hirify.global provides staffing and contract opportunities.

What you will do

• Support application security platforms, tooling, and policy implementation.
• Conduct vulnerability analysis, root-cause analysis, and false-positive assessments.
• Support SAST, SCA, API Security, DAST, Infrastructure-as-Code, and Mobile Security testing.
• Administer AppSec platforms and provide secure coding and remediation guidance to development teams.
• Support platform escalations and developer enablement activities.
• Use GitLab, CI/CD pipelines, DevSecOps practices, APIs, automation, and AI-assisted workflows to improve security operations.

Requirements

• Deep understanding of Secure SDLC and application security practices.
• Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code, and Mobile Security testing.
• Experience administering AppSec platforms and security tooling.
• Experience with vulnerability validation, root-cause analysis, false-positive assessments, secure coding guidance, and remediation support.
• Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls.
• CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized certification is valued.

Culture & Benefits

• 12-month contract opportunity.
• W2 employment only; C2C is not eligible.
• Visa sponsorship is available.
• Hybrid work schedule with four onsite days and one remote day each week.