> Markdown version of [/jobs/ext/1931983-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/1931983-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** Javen Technologies, Inc
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Amazon Web Services, Build Automation, Unit Testing, Continuous Integration, DevOps, Python (Programming Language), Windows Servers, Power BI, Software Engineering, Systems Integration, Software Vulnerability Management, Data Processing, Software Security, Infrastructure as Code (IaC), Api Gateway, Terraform, Static Application Security Testing, Vulnerability Analysis, Programming Languages
- **Published:** August 5, 2026
- **Apply:** https://www.dice.com/job-detail/a1dc2af8-3963-4bfc-9ebd-6846a4fd37ac

## About the Role

* API Security
 * Software Composition Analysis (SCA)
 * Static Application Security Testing (SAST)

Experience providing end-user support and troubleshooting technical issues.

Experience with Terraform or similar Infrastructure as Code technologies.

Proficiency in one or more modern programming languages:

 * Javascript
 * Python

Experience developing automation, integrations, or operational tooling.

Understanding of secure software development lifecycle (SSDLC) principles and application security practices.

Strong analytical, troubleshooting, and communication skills., * Unit testing experience.

 * Experience writing one-off automation and data-processing scripts.
 * Amazon Web Services (AWS) experience.
 * Power BI experience.
 * Windows Server administration experience.
 * Familiarity with CI/CD pipelines, API gateways, and DevOps practices.

## Description

The Code Security Engineer is responsible for the administration, operation, and continuous improvement of the organization's code security capabilities, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and API Security platforms. This role supports security tooling operations, runtime monitoring, developer enablement, and end-user support while partnering with engineering teams to develop integrations, automation, reporting, and processes that improve security visibility and operational efficiency across the software development lifecycle., * Administer and support SAST, SCA, and API Security platforms.

 * Configure, maintain, and optimize security scanning and runtime monitoring capabilities.
 * Analyze security findings and assist development teams with vulnerability remediation and risk reduction.
 * Provide end-user support, troubleshooting, and onboarding assistance for security tools and related processes.
 * Monitor platform health, scan coverage, performance metrics, and operational effectiveness.
 * Design and develop integrations between security platforms, CI/CD pipelines, reporting systems, and other enterprise tools.
 * Build automation and one-off solutions to improve security workflows and reduce operational overhead.
 * Utilize Infrastructure as Code (IaC) practices to deploy and manage tooling and supporting infrastructure.
 * Develop dashboards, metrics, and reporting to support security program visibility and decision-making.
 * Collaborate with development, DevOps, and security teams to integrate security into engineering workflows.
 * Contribute to security tooling roadmaps, enhancement efforts, and operational improvements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)