Application Security Engineer

Ardent

Application Security Engineer securing USCIS applications and delivery environments for Ardent’s federal national security mission. Supporting vulnerability management, DevSecOps automation, secure coding, and reference implementations.

Posted 8/12/2026full-timeRemote • 🇺🇸 United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security testing, vulnerability assessments, and secure coding practices, with a strong focus on integrating security controls within CI/CD pipelines and DevSecOps workflows. Proficient in developing secure reference implementations and maintaining compliance with industry standards such as Zero Trust, NIST, and OWASP.

Highest-signal resume keywords

Application Security TestingVulnerability AssessmentSecure Coding PracticesCI/CD Pipeline IntegrationDevSecOps Workflows

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTDASTSCAContainer ScanningDependency SecurityVulnerability Management WorkflowsTechnical AnalysisDocumentationRemediation TrackingProof-of-Concept Development

Soft Skills

CollaborationTechnical GuidanceCommunication

Tools & Technologies

Security Scanning ToolsDevSecOps ToolsAutomation WorkflowsDashboardsAPIs

Industry Keywords

Zero TrustNISTCISACISOWASPSecure Software Development Lifecycle

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Perform application security testing and vulnerability assessments across web applications, APIs, services, containers, dependencies, and delivery environments
Support automated security scanning and configure and maintain security scanning tools across development, build, test, release, and runtime activities
Document, triage, track, and validate vulnerabilities through remediation and closure
Maintain vulnerability status, remediation evidence, and closure documentation
Provide secure coding and remediation guidance to development teams
Support security tool and control integration within CI/CD pipelines
Implement automated security gates, policy enforcement, and reporting workflows
Integrate DevSecOps tools through APIs
Develop proof-of-concept secure reference implementations and sample applications
Maintain reusable secure design patterns and examples
Develop security utility applications, scripts, dashboards, integrations, and automation workflows
Monitor application security standards and controls aligned with Zero Trust, NIST, CISA, and CIS frameworks
Collect security assessment data, scan results, vulnerability evidence, remediation status, and operational metrics
Support enterprise DevSecOps, vulnerability reduction, secure software development, and application security modernization initiatives across USCIS programs
Collaborate with development, security, platform, operations, and other technical teams

Requirements

What you’ll need

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field
Minimum of 4 years of professional IT experience plus 4 years supporting application security, cybersecurity, DevSecOps, or closely related subject matter requirements
Advanced technical knowledge of application security technologies, specialized applications, and operational environments
Experience performing technical and functional analysis, system integration, implementation, documentation, and technical guidance for complex application security or DevSecOps initiatives
Experience with application security testing and vulnerability assessment
Experience with secure coding practices and providing remediation guidance to development teams
Experience with SAST, DAST, SCA, container scanning, and dependency security
Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows
Experience developing proof-of-concept applications, secure reference implementations, utility applications, scripts, dashboards, or API-based integrations
Experience with vulnerability management workflows, including triage, documentation, remediation tracking, validation, and closure
Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices
Experience collaborating with development, security, platform, operations, and other technical teams
Willingness to undergo the government-issued background investigation process

Benefits

Comp & perks

Competitive pay
Comprehensive health coverage
Flexible PTO
Federal holidays off
Tuition reimbursement
Professional development support
Wellness stipends
Flexible work arrangements