Responsibilities
- Perform application security testing and vulnerability assessments across applications, APIs, services, containers, dependencies, and delivery environments.
- Configure and maintain automated security scanning across development, build, test, release, and runtime activities.
- Document, triage, track, validate, and close vulnerabilities while maintaining remediation evidence and status information.
- Guide development teams on secure coding practices, scan results, vulnerable dependencies, policy violations, and remediation.
- Integrate security tools and controls into CI/CD pipelines, including automated security gates, policy enforcement, reporting, and API integrations.
- Develop proof-of-concept secure reference implementations demonstrating authentication, authorization, logging, dependency management, secrets handling, containerization, API security, and secure CI/CD workflows.
- Create utility applications, scripts, dashboards, integrations, and automation workflows that improve vulnerability management, reporting, remediation tracking, interoperability, and DevSecOps operations.
- Monitor alignment with application security standards, Zero Trust principles, and applicable NIST, CISA, and CIS frameworks.
- Collect security assessment data, scan results, vulnerability evidence, remediation status, and operational metrics for reporting and continuous improvement.
- Support enterprise DevSecOps, vulnerability reduction, secure software development, and application security modernization initiatives across USCIS programs.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
- At least four years of professional IT experience and four years supporting application security, cybersecurity, DevSecOps, or closely related requirements.
- Advanced technical knowledge of application security technologies, specialized applications, and operational environments.
- Experience with technical and functional analysis, system integration, implementation, documentation, and technical guidance for complex application security or DevSecOps initiatives.
- Experience with application security testing, vulnerability assessment, secure coding, remediation guidance, SAST, DAST, SCA, container scanning, and dependency security.
- Experience integrating security controls and tools into CI/CD pipelines and DevSecOps workflows.
- Experience developing proof-of-concept applications, secure reference implementations, utility applications, scripts, dashboards, or API-based integrations.
- Experience with vulnerability triage, documentation, remediation tracking, validation, and closure.
- Knowledge of Zero Trust, NIST, CISA, CIS, OWASP, and secure software development lifecycle practices.
- Preferred experience interpreting results from SonarQube, Nexus IQ, Checkmarx, and Twistlock; supporting Nexus Repository Firewall policies; analyzing CVEs and CVSS scores; and working with Kubernetes, Splunk, New Relic, Harness, or similar tools.
- Preferred ability to build proof-of-concept applications using Java/Spring Boot, Node.js, Python, Ruby, or .NET and create API-based automation and security integrations.
- Must be willing to undergo the government-issued background investigation process.
Benefits
- Remote position
- Comprehensive health coverage
- Flexible paid time off
- Federal holidays off
- Tuition reimbursement
- Professional development support
- Wellness stipends
Tech Stack
About Ardent
For nearly 20 years, Ardent has served this country by delivering award-winning security and defense technology solutions. Our clients' missions range from medical evacuation in overseas theaters to border protection to port security. They trust Ardent to guarantee quality, reliability, and responsiveness. The Ardent Team is the underpinning of our success. Our IT professionals specialize in large-scale situational awareness, geographic visualization, cloud, and information sharing technologies. Ardent inspires its employees to love their jobs. We can help you grow your career by connecting you with our top-notch professionals on challenging projects. We actively mentor and equip our employees to be thought leaders in their fields, and we offer competitive salaries and benefits, including financial rewards for excellence. If you like a fast-paced environment where insights are valued and innovations encouraged, then we want to meet you. Please visit our Career Portal www.ardentmc.com/careers to discover opportunities at Ardent.