Application Security Engineer

Job Summary

Our client, a major U.S. airline, is looking for an Application Security Engineer to join their Technology Risk Management team. It’s a contract role running through the end of the year with a strong likelihood of extension, based in Fort Worth, TX, and the role requires working onsite 3 days a week. This person will configure, tune, and maintain application security tools including GitHub code scanning, SAST, SCA, DAST, secret scanning, and API security tools. They’ll scan applications and APIs for vulnerabilities, triage findings, work directly with developers on remediation, build security checks into CI/CD pipelines, and write Python, Java, or PowerShell automation to integrate security tools and streamline vulnerability management. We’re looking for someone who has hands-on experience owning and tuning application security scanning tools and working with development teams to fix vulnerabilities in code, which is the key differentiator for this role. Experience limited to SOC monitoring or incident response, GRC or audit work, infrastructure or network vulnerability scanning and patching, or software development without ownership of security tooling is not a fit. Candidates will complete a technical assessment covering coding and application security as part of the process.


This position is W-2 only. We do not work with third-party firms or C2C arrangements for this role.

 

Core Responsibilities

• Configure, tune, and maintain application security tools including GitHub code scanning, SAST, SCA, DAST, secret scanning, and API security solutions
• Scan applications and APIs for security vulnerabilities and triage findings, including reducing false positives
• Partner with development teams to explain vulnerabilities and guide remediation
• Integrate security scanning and controls into CI/CD pipelines
• Develop Python, Java, or PowerShell automation to integrate security tools and streamline vulnerability management processes
• Define and implement application and API security requirements, including authentication, authorization, and data protection controls
• Support threat modeling, secure design reviews, and secure coding standards across the software development lifecycle
• Translate application security policies and standards into scalable controls, processes, and developer-focused solutions

 

Required Skills/Experience (Must-Haves)

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
• 3+ years of experience in cybersecurity engineering, with hands-on application security experience
• Hands-on experience configuring and tuning application security scanning tools such as GitHub Advanced Security/CodeQL, Checkmarx, Veracode, Snyk, Fortify, or SonarQube
• Working knowledge of SAST, SCA, DAST, and secret scanning, and what each type of tool detects
• Understanding of application security vulnerabilities (such as the OWASP Top 10) across applications built in multiple languages, including Python, Java, JavaScript, and C#
• Experience integrating security tools into CI/CD pipelines
• Experience using Python, Java, or PowerShell to build security automation or tool integrations
• Experience working directly with developers to remediate vulnerabilities
• Experience with vulnerability management processes
• Strong written and verbal communication skills
• Able to work onsite in Fort Worth, TX 3 days a week

 

Preferred Skills/Experience (Nice-to-Haves)

• Prior software development experience before moving into security
• API security testing experience
• Threat modeling and secure design review experience
• Cloud security experience with AWS, Azure, or Google Cloud
• Experience with Tenable or similar vulnerability management tools
• Familiarity with compliance standards such as PCI-DSS, ISO 27001, or GDPR
• Application security certifications such as CSSLP, GWEB, GWAPT, OSWE, or OSCP
• Airline or travel industry experience

 

Key Competencies & Behaviors

• Explains vulnerabilities clearly to developers and works with them to get fixes done
• Balances security requirements with development timelines and business needs
• Takes ownership of tools and processes rather than just reporting findings
• Looks for opportunities to automate repetitive security work
• Collaborative in a global team environment
• Organized and clear in documentation and communication

 

Work Environment

• Location: Fort Worth, TX (onsite 3 days a week)
• Contract length: Through end of year, with strong likelihood of extension

 

Compensation & Benefits 

• Pay Range: The approximate pay range for this position is between $31.00 and $45.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums. 
• Medical, Dental, & Vision Insurance Plans 
• Employee-Owned Profit Sharing (ESOP) 
• 401K offered 

 

About KellyMitchell 

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice. 


Marketing Disclosure 

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy



[142703]