Application & Cloud Security Engineer
Application & Cloud Security Engineer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Job: Application & Cloud Security Engineer
Location: Houston TX 77002
Term: 6- MONTH Contract to Hire
Interview Process: 30-minute video team may have second round in-person
Project Day to Day: responsible for maintaining the tools check marks for the application security that does scanning check for code. Applications security Checkmarx (SAST) Invicti (DAST) SonarQube. Cloud Security PRIMSA cloud WIZ
When should this person start ASAP
Is budget approved YES
C2C accepted Must be able to convert on W2 W/O sponsorship
Travel: NO
Hours: 40/HR. work week
Remote: Hybrid 3 days onsite/2 days remote
TOP SKILLS:
Applications security Checkmarx (SAST) Invicti (DAST) SonarQube
Cloud Security PRIMSA
-
- WIZ would be a plus but need to focus on PRISMA
Will consider Multi-cloud with Application skills
-
- Soft skills: lots of collaboration lead projects and almost get started on day one know tools & technical side
- Will drive initiatives that maneger gets from CISO
HR JOB SUMMARY:
We are seeking a motivated Application & Cloud Security Engineer with hands-on experience in modern AppSec and CloudSec tools. This role will focus on securing applications and cloud environments by enabling scanning tools triaging findings driving remediation with engineering teams and maturing automation and metrics.
Key Responsibilities
- Application Security:
- Configure manage and optimize Checkmarx (SAST) Invicti (DAST) and SonarQube to ensure continuous application scanning.
- Enable SAST/DAST scanning secrets scanning API security and dependency management across repositories.
- Partner with development teams to triage vulnerabilities provide remediation guidance and integrate security in CI/CD pipelines.
- Cloud Security:
- Administer and enhance Prisma Cloud and Wiz for CSPM CNAPP and CWPP use cases.
- Identify and remediate misconfigurations compliance violations and workload risks across Azure GCP and hybrid cloud environments.
- Support IaC security checks cloud posture reporting and runtime monitoring.
- Collaboration & Governance:
- Work closely with Engineering IAM Networking and Infrastructure teams to drive secure-by-design practices.
- Document standards playbooks and security guardrails across AppSec and CloudSec.
- Contribute to automation of dashboards ticketing (ServiceNow) and metrics visualization (Tableau/PowerBI).
Required Skills & Qualifications
- 5 years and above of experience in Application Security and/or Cloud Security.
- Hands-on expertise with:
- Checkmarx Invicti SonarQube (AppSec tools).
- Prisma Cloud Wiz (CloudSec tools).
- Understanding of secure coding OWASP Top 10 and cloud security best practices (Azure CAF GCP Security Foundations).
- Familiarity with CI/CD pipelines DevOps workflows and Infrastructure-as-Code (Terraform GitHub Actions Jenkins etc.).
- Strong problem-solving skills ability to prioritize high-risk findings and collaborative approach with developers/engineers
Employment Type
Full-time
