Application Security / DevSecOps Engineer | New Jersey / Remote | Contract

Application Security / DevSecOps Engineer | New Jersey / Remote | Contract

Walker Healthforce is seeking an Application Security / DevSecOps Engineer with 6-9 years of cybersecurity experience to support an enterprise Application Security program and integrate security throughout the software development lifecycle. This is a Contract opportunity.

Start Date: 09/28/2026
Location: Primary New Jersey; Remote will be considered
Hours/Schedule: Monday-Friday, 40 hours
Worker Type: W2

Core Requirements:

• 6-9 years of Application Security / cybersecurity experience
• Strong hands-on DevSecOps experience
• SAST and SCA implementation and analysis experience
• Experience with Checkmarx or similar application security scanning platforms
• Experience integrating security scanning into CI/CD pipelines
• Experience with GitHub, GitLab, Azure DevOps, and/or Jenkins
• Hands-on secure code review experience
• Strong vulnerability analysis and remediation experience
• Experience identifying coding and validation weaknesses
• Experience assessing third-party and open-source libraries/packages
• Understanding of software supply-chain security
• Strong experience collaborating directly with development teams

We Consider It A Bonus If You Also Have:

• Enterprise Application Security program experience
• Experience standardizing AppSec controls across multiple development platforms
• Experience improving developer adoption of secure coding and remediation practices

Job Responsibilities:

• Integrate security controls throughout the SDLC and CI/CD pipelines
• Onboard applications into security scanning platforms
• Configure and execute SAST and SCA scans
• Establish recurring application security scanning
• Analyze and triage security findings
• Support vulnerability remediation
• Integrate security findings with development workflows
• Conduct hands-on secure code reviews
• Identify coding and validation weaknesses
• Review third-party and open-source dependencies
• Assess software supply-chain risks
• Help ensure applications consume trusted and secure software components
• Partner with development teams to identify and remediate security gaps
• Provide actionable application security guidance and support