What are the responsibilities and job description for the Application Security Engineer-Policy & Platform position at eHub Global Inc?
Application Security Engineer-Policy & Platform
Location-San Antonio or Plano-On-site 4 days per week
Duration-12 months Plus
- Strong Application Security experience, ideally 6–10 years, with a preference for more than six years.
- Hands-on experience analyzing SAST and SCA findings.
- Experience configuring or tuning vulnerability policies within application security platforms.
- Ability to investigate vulnerabilities, identify false positives, and assess technical findings.
- Understanding of Secure SDLC, DevSecOps, CI/CD pipelines, and application security controls.
- Ability to read and understand source code to evaluate vulnerabilities. Extensive software development experience is not required.
- A major responsibility involves working within AppSec tools to configure policies that determine whether findings generate tickets, are excluded, or require additional action.
- Candidates should understand how security platforms integrate with development and ticketing systems, but they do not necessarily need to build or maintain those integrations themselves.
- Strong SAST/SCA experience is important, particularly the ability to read code and determine whether reported vulnerabilities are legitimate.
- Candidates do not need 10 years of software development experience, but they should be comfortable reading at least one programming language. Java or another language is acceptable.
- The manager is flexible on specific AppSec tools if the candidate has comparable platform and policy configuration experience.