Senior Application Security Engineer
Confirmed on the employer's own hiring board on Oct 19, 2026. First seen by Alion on Oct 16, 2026. Strategic Staffing Solutions scores B on the Alion truth index.
STRATEGIC STAFFING SOLUTIONS HAS AN OPENING!
This is a Contract Opportunity with our company that MUST be worked on a W2 Only. No C2C eligibility for this position. Visa Sponsorship is Available! The details are below.
“Beware of scams. S3 never asks for money during its onboarding process.”
Job Title: Senior Application Security Engineer - Policy & Platform
Location: San Antonio, TX or Plano, TX
Work Schedule: Hybrid - 4 Days Onsite / 1 Day Remote
Contract Length: 12 Months
Job Ref #: JOB-248409
Position Summary
Seeking a Senior Application Security Engineer to provide technical expertise across the Application Security platform portfolio.
The AppSec Engineer will support application security tooling, policy implementation, vulnerability analysis, false-positive validation, platform escalations, and developer enablement activities.
Key Responsibilities
Support Application Security platforms, tooling, and policy implementation.
Conduct vulnerability analysis, root-cause analysis, and false-positive assessments.
Support SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
Administer and support AppSec platforms and security tooling.
Provide secure coding guidance and vulnerability remediation support to development teams.
Support platform escalations and developer enablement activities.
Work with GitLab, CI/CD pipelines, and DevSecOps practices to support automated security controls.
Leverage APIs, automation, and AI-assisted workflows to improve security operations.
Required Qualifications
Deep understanding of Secure SDLC and Application Security practices.
Hands-on experience with SAST, SCA, API Security, DAST, Infrastructure-as-Code (IaC), and Mobile Security testing.
Experience administering and supporting AppSec platforms and security tooling.
Experience conducting vulnerability validation, root-cause analysis, and false-positive assessments.
Experience providing secure coding guidance and remediation support to development teams.
Familiarity with GitLab, CI/CD pipelines, DevSecOps practices, and automated security controls.
Experience leveraging APIs, automation, and AI-assisted workflows to improve security operations.
Certifications such as CSSLP, CISSP, GWAPT, GWEB, or equivalent industry-recognized credentials.