Application Security Engineer in Colorado Springs

Energy Jobline
Colorado Springs, CO, United States
2 days ago
Apply on www.energyjobline.com
Prepare application

Role details

Contract type
Temporary contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Compensation
$114,400.0 - $135,200.0
Working hours
Regular working hours

Tech stack

Bash Shell Python (Programming Language) Windows PowerShell Software Engineering Scripting Software Security

Job description

LaSalle Network is partnering with a current client to hire two Application Security Engineers for a focused, three-month secrets remediation initiative. These engineers will help address an existing backlog of exposed secrets and hard-coded credentials within source code, partnering with software development teams to investigate findings and drive remediation.\n \n \nThis opportunity requires hands-on application security experience, strong scripting skills and the ability to contribute with limited ramp-up. The engagement is expected to conclude after three months, with no anticipated extension or conversion to permanent employment.\n \n

Requirements

  • Three or more years of hands-on application security experience. \n

  • Experience investigating and remediating exposed secrets or hard-coded credentials within source code repositories. \n

  • Strong scripting experience in at least two of the following: PowerShell, Bash and Python. \n

  • Strong Git/GitHub knowledge and experience supporting engineering remediation projects. \n

  • Ability to understand and improve existing scripts. \n

  • Strong communication and collaboration skills, including experience working directly with software developers. \n

  • Ability to manage competing priorities and drive findings through resolution within a short-term engagement. \n

Benefits & conditions

  • Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning. \n

  • Assess findings involving cloud credentials, API keys, private keys and other secrets to determine the appropriate remediation approach. \n

  • Use existing scripts to validate whether identified credentials remain active. \n

  • Review, modify and improve existing validation scripts to increase efficiency; extensive automation development is not the primary focus. \n

  • Partner with software development teams and relevant credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate. \n

  • Draw on developers’ application knowledge to support investigations and resolve findings. \n

  • Track remediation progress and communicate findings, dependencies and blockers. \n

  • Manage assigned work independently and maintain strong follow-through throughout the engagement. \n, n \n

  • Experience with GitHub Advanced Security secret scanning. \n

  • Experience investigating multiple credential types, including cloud credentials, API keys and private keys. \n

  • Healthcare or revenue cycle management experience. Candidates from other industries are welcome. \n, The anticipated hourly pay range is $55-$65 per hour, based on relevant experience and qualifications.\n \n Interview Process

One video panel interview with the hiring manager and a technical team member, covering technical and behavioral questions.\n \n Apply Today

If you have hands-on application security experience and enjoy partnering with developers to resolve security risks, apply today.\n \n \n \n

LaSalle Network is an Equal Opportunity Employer m/f/d/v.

LaSalle Network is the leading provider of direct hire and temporary staffing services. For over two decades, LaSalle has helped organizations hire faster and connect top talent with opportunities, from entry-level positions to the C-suite. With units specializing in Accounting and Finance, Administrative, Engineering, Marketing, Technology, Supply Chain, Revenue Cycle, Call Center, Human Resources and Executive Search, LaSalle offers staffing and recruiting solutions to companies of all sizes and across all industries.\n \n \nLaSalle Network is the premier staffing and recruiting firm, earning over 100 culture, revenue and industry-based awards from major publications and having its company experts regularly contribute insights on retention strategies, hiring trends, hiring challenges, and more to news outlets. LaSalle Network offers temporary Field Employees benefit plans including medical, dental and vision coverage. Family Medical Leave, Worker’s Compensation, Paid Leave and Sick Leave are also provided. View a full list of our benefits here: View a full list of our benefits here.\n

All assignments are at-will and their duration is subject to change.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.energyjobline.com
Prepare application

Good distractions

Loading talks and stories from around this role…