Associate DevSecOps Engineer

Associate Dev Sec Ops  Engineer

Location
:
Wilmington, DE (Onsite/Hybrid).
Hours
:
Monday – Friday 8:00 – 5:00.
Employment type
:
Full‑time.

• Provide expertise in Dev Sec Ops , specializing in web application security, SCA, SAST, and DAST services.
• Develop policies to protect web applications and APIs from malicious payload attacks, provide virtual patching capabilities, and validate through security testing.
• Assist in developing an automated security framework for robust deployment tools and processes, leveraging scripting languages and open‑source solutions.
• Manage and maintain Web Application Firewall (WAF) inventory, ensuring effective configuration, monitoring, and reporting.
• Contribute to observability initiatives by integrating security telemetry, dashboards, and alerts into monitoring systems.
• Explore and apply AI‑driven security solutions for anomaly detection, threat prediction, and automated remediation. Help evolve CSC’s application security functions and services.
• Identify security exposures and develop mitigation plans.
• Identify, report, and fix technical debt.
• Assist Senior Application Security on all application security activities.
• Be productive and participate in security initiatives with minimal supervision.

• 0–2 years of experience in an Application Security or related position.
• Familiarity with designing and implementing solutions such as SAST, SCA, DAST, and IaC tools.
• Experience with SAST, SCA, DAST, and IaC tools.
• Knowledge of common and emerging security threats and best practices.
• Excellent communication skills, strong analytical aptitude, and attention to detail.
• Fast learner with a strong willingness to learn.
• Good team player who is self‑motivated and well organized.

• Python, Power Shell, Bash, and SQL database experience.
• Experience with data visualization tools (e.g., Power BI).
• Knowledge of securing architecture, APIs, and web applications.
• Exposure to cloud platforms and security frameworks such as CIS, NIST, RFC
  2196.
• Familiarity with Terraform, Ansible, Git Hub, Jenkins, Azure Dev Ops, and Kubernetes Resource Security.