Application Security Engineer
First seen by Alion on Oct 5, 2026.
PROJECT INFORMATION:
Industry: telecommunication
Remote work: 100%
Project language: English
Business trips: n/a
Project length: 12 months contracts + prolongations.
Start: ASAP / 1 month notice
Assignment type: B2B
Summary: This role aims to strengthen the organization's application security posture by analyzing existing vulnerabilities, driving their remediation, and implementing modern security processes and tools.
Technical Environment: DefectDojo, GitLab Ultimate, SonarQube / SCA, Power BI.
Responsibilities:
Analyze the current state component by component using DefectDojo.
Collaborate with development teams on vulnerability mitigation.
Present a remediation plan in coordination with Tech Leads and security profiles.
Drive the execution of the remediation plan.
Provide technical support to the DevOps team.
Define and implement secrets management procedures.
Leverage GitLab Ultimate security features.
Contribute to the deployment of SCA solutions (SonarQube).
Set up Power BI dashboards for high-level security reporting.
Produce reports for the security team and developers.
Ensure visibility on the evolution of the security posture.
Must Haves:
Experience with vulnerability management tools (DefectDojo or equivalent).
Knowledge of DevSecOps practices and CI/CD pipelines.
Knowledge of secure secrets management procedures.
Proficiency with GitLab and its security features.
Familiarity with SCA and SAST tools (SonarQube).
Reporting and data visualization skills (Power BI).
Experience using Jira/Confluence.
Experience with Agile Scrum methodology.
Experience with OWASP security recommendations and NIS2 compliance.
Proven experience with major development languages: Java, Angular, Python, Drupal, etc.
Nice to Haves:
Strong analytical and synthesis skills.
Ability to collaborate with diverse technical teams.
Ability to communicate security topics to non-experts.
Autonomy and proactivity.
Tech stack
- Vulnerability management tools
- DevSecOps
- GitLab
- Power BI
- Jira
- Confluence
- OWASP