Application Security Engineers

• Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning.
• Assess findings involving cloud credentials, API keys, private keys and other secrets to determine the appropriate remediation approach.
• Use existing scripts to validate whether identified credentials remain active.
• Review, modify and improve existing validation scripts to increase efficiency; extensive automation development is not the primary focus.
• Partner with software development teams and relevant credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate.
• Draw on developers’ application knowledge to support investigations and resolve findings.
• Track remediation progress and communicate findings, dependencies and blockers.
• Manage assigned work independently and maintain strong follow-through throughout the engagement.

This opportunity requires hands-on application security experience, strong scripting skills and the ability to contribute with limited ramp-up. The engagement is expected to conclude after three months, with no anticipated extension or conversion to permanent employment., * Three or more years of hands-on application security experience.

• Experience investigating and remediating exposed secrets or hard-coded credentials within source code repositories.
• Strong scripting experience in at least two of the following: PowerShell, Bash and Python.
• Strong Git/GitHub knowledge and experience supporting engineering remediation projects.
• Ability to understand and improve existing scripts.
• Strong communication and collaboration skills, including experience working directly with software developers.
• Ability to manage competing priorities and drive findings through resolution within a short-term engagement.

Preferred Qualifications

• Experience with GitHub Advanced Security secret scanning.
• Experience investigating multiple credential types, including cloud credentials, API keys and private keys.
• Healthcare or revenue cycle management experience. Candidates from other industries are welcome., If you have hands-on application security experience and enjoy partnering with developers to resolve security risks, apply today.

The anticipated hourly pay range is $55-$65 per hour, based on relevant experience and qualifications.

LaSalle Network is the leading provider of direct hire and temporary staffing services. For over two decades, LaSalle has helped organizations hire faster and connect top talent with opportunities, from entry-level positions to the C-suite. With units specializing in Accounting and Finance, Administrative, Engineering, Marketing, Technology, Supply Chain, Revenue Cycle, Call Center, Human Resources and Executive Search, LaSalle offers staffing and recruiting solutions to companies of all sizes and across all industries.

LaSalle Network is the premier staffing and recruiting firm, earning over 100 culture, revenue and industry-based awards from major publications and having its company experts regularly contribute insights on retention strategies, hiring trends, hiring challenges, and more to national news outlets. LaSalle Network offers temporary Field Employees benefit plans including medical, dental and vision coverage. Family Medical Leave, Worker’s Compensation, Paid Leave and Sick Leave are also provided. View a full list of our benefits here: View a full list of our benefits here. xrbllit

All assignments are at-will and their duration is subject to change.