Responsibilities
- Perform application security testing and vulnerability assessments for applications, APIs, services, containers, dependencies, and delivery environments.
- Configure and maintain automated security scanning across development, build, test, release, and runtime activities.
- Document, triage, track, validate, and close vulnerabilities while maintaining remediation evidence and status documentation.
- Provide secure coding and remediation guidance to development teams and interpret scan results, dependency reports, and policy violations.
- Integrate security tools and controls into CI/CD pipelines, including automated security gates, policy enforcement, reporting, and API-based workflows.
- Develop proof-of-concept secure reference implementations demonstrating authentication, authorization, logging, dependency management, secrets handling, containerization, API security, and secure CI/CD practices.
- Create utility applications, scripts, dashboards, integrations, and automation workflows to improve vulnerability management and DevSecOps operations.
- Monitor alignment with application security standards and support Zero Trust, NIST, CISA, CIS, and secure software development initiatives.
- Collect security assessment data, scan results, vulnerability evidence, remediation status, and operational metrics for reporting and continuous monitoring.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
- At least 4 years of professional IT experience plus 4 years of experience supporting application security, cybersecurity, DevSecOps, or closely related subject matter.
- Advanced technical knowledge of application security technologies, specialized applications, and operational environments.
- Experience with technical and functional analysis, system integration, implementation, documentation, and technical guidance for complex application security or DevSecOps initiatives.
- Experience with application security testing, vulnerability assessment, secure coding, remediation guidance, SAST, DAST, SCA, container scanning, and dependency security.
- Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows.
- Experience developing proof-of-concept applications, secure reference implementations, utility applications, scripts, dashboards, or API-based integrations.
- Experience with vulnerability triage, documentation, remediation tracking, validation, and closure.
- Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices.
- Preferred experience interpreting results from SonarQube, Nexus IQ, Checkmarx, and Twistlock; configuring Nexus Repository Firewall policies; analyzing CVEs and CVSS scores; building applications in Java/Spring Boot, Node.js, Python, Ruby, or .NET; using Kubernetes, Splunk, New Relic, and Harness; and translating security frameworks into application security practices.
- Ability to collaborate with development, security, platform, operations, and other technical teams.
- Willingness to undergo the government-issued background investigation process.
Benefits
- Remote position.
- Equal opportunity employer.
- Candidates must be willing to undergo a government-issued background investigation due to the nature of the supported work.
- The employer encourages Veterans and people with disabilities to apply.
Tech Stack
Categories
About Ardent
For nearly 20 years, Ardent has served this country by delivering award-winning security and defense technology solutions. Our clients' missions range from medical evacuation in overseas theaters to border protection to port security. They trust Ardent to guarantee quality, reliability, and responsiveness. The Ardent Team is the underpinning of our success. Our IT professionals specialize in large-scale situational awareness, geographic visualization, cloud, and information sharing technologies. Ardent inspires its employees to love their jobs. We can help you grow your career by connecting you with our top-notch professionals on challenging projects. We actively mentor and equip our employees to be thought leaders in their fields, and we offer competitive salaries and benefits, including financial rewards for excellence. If you like a fast-paced environment where insights are valued and innovations encouraged, then we want to meet you. Please visit our Career Portal www.ardentmc.com/careers to discover opportunities at Ardent.