Information Security Engineer IV

Software Guidance & Assistance, Inc. (SGA) is searching for a Code Security Enginee r for a remote contract opportunity with one of our premier banking clients.

The Code Security Engineer is responsible for the administration, operation, and continuous improvement of the organization's code security capabilities, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and API Security platforms. This role supports security tooling operations, runtime monitoring, developer enablement, and end-user support while partnering with engineering teams to develop integrations, automation, reporting, and processes that improve security visibility and operational efficiency across the software development lifecycle.

The engineer must be able to be able to be on call according to a predetermined schedule. This role is not eligible for over time.

Responsibilities :

• Administer and support SAST, SCA, and API Security platforms.
• Configure, maintain, and optimize security scanning and runtime monitoring capabilities.
• Analyze security findings and assist development teams with vulnerability remediation and risk reduction.
• Provide end-user support, troubleshooting, and onboarding assistance for security tools and related processes.
• Monitor platform health, scan coverage, performance metrics, and operational effectiveness.
• Design and develop integrations between security platforms, CI/CD pipelines, reporting systems, and other enterprise tools.
• Build automation and one-off solutions to improve security workflows and reduce operational overhead.
• Utilize Infrastructure as Code (IaC) practices to deploy and manage tooling and supporting infrastructure.
• Develop dashboards, metrics, and reporting to support security program visibility and decision-making.
• Collaborate with development, DevOps, and security teams to integrate security into engineering workflows.
• Contribute to security tooling roadmaps, enhancement efforts, and operational improvements.

Requirements :

• Experience with:

• API Security
• Software Composition Analysis (SCA)
• Static Application Security Testing (SAST)

• Experience providing end-user support and troubleshooting technical issues.
• Experience with Terraform or similar Infrastructure as Code technologies.
• Proficiency in one or more modern programming languages:

• Javascript
• Python

• Experience developing automation, integrations, or operational tooling.
• Understanding of secure software development lifecycle (SSDLC) principles and application security practices.

Preferred Skills :

• Unit testing experience.
• Experience writing one-off automation and data-processing scripts.
• Amazon Web Services (AWS) experience.
• Power BI experience.
• Windows Server administration experience.
• Familiarity with CI/CD pipelines, API gateways, and DevOps practices.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
#LI-SG1