Application Security Risk & Automation SMEs

Application Security Risk & Automation SMEs

San Antonio, TX or Plano, TX

12+ Months - Long Term Contract

Application Security Risk & Automation SMEs to support Secure SDLC automation and operationalization

Primary Responsibilities:

• Reduce developer friction through finding validation, risk-based prioritization, and false-positive reduction.
• Configure and maintain GitLab security approval workflows, Secure MR controls, approval policies, and enforcement gates.
• Support implementation of AI-assisted triage, remediation recommendations, and automated findings management.
• Build and maintain automation for finding enrichment, correlation, routing, deduplication, and reporting.
• Partner with development teams to improve remediation outcomes and adoption of AI-assisted security workflows.
• Support onboarding and operationalization of new AppSec tooling and capabilities.

Desired Skills:

• Strong application security and OWASP Top 10 knowledge.
• Experience with SAST, DAST, SCA, Container Security, and Secrets Detection tools.
• Experience configuring GitLab security controls, approval workflows, and policy-based enforcement.
• Experience integrating security platforms with GitLab, ServiceNow, Jira, and enterprise reporting solutions.
• Experience leveraging APIs, scripting, automation, and AI-enabled workflows to improve security operations.
• Understanding of software supply chain security, dependency management, and modern DevSecOps practices.