Software composition analysis jobs

Senior Application Security Engineer

Blue Cross and Blue Shield of Nebraska · Posted Nov 6, 2026

Open

Omaha, Nebraska, United States
Hybrid
Senior
6+ years

Senior Application Security Engineer

Blue Cross and Blue Shield of Nebraska · Posted Nov 6, 2026

Open

Omaha, Nebraska, United States
Hybrid
Senior
6+ years

DevSecOps Senior Automation Platform Engineer

CACI · Posted Nov 6, 2026

Open

Aberdeen Proving Ground, Maryland, United States
On-site
Full-time · Senior
$108K–$228K per year
7+ years

Apply with RefersoAI Apply on careers page

Automation/DevOps Engineers focus on scripting, templating, and pipeline design to automate builds, deployments, testing, and compliance checks within a cloud-native AWS-hosted ecosystem.

Compensation

The proposed salary range for this position is: $108,400 - $227,500 USD

Responsibilities

Scripting, templating, and pipeline design to automate builds, deployments, testing, and compliance checks
Develop reusable templates for different project types to ensure consistent and secure CI/CD pipelines
Work with Configuration Manager to develop processes for versioning, branching, and tagging
Reduce drift in test and production environments using configuration management tools
Provide escalation support for cloud-related incidents and service requests

Requirements

Bachelors degree in computer science
IT
cyber security
Nice to have: Jira
Nice to have: Jira Service Desk

Skills

Active security clearance Security+IAT Level II Computing environment certification

Application Security Engineer

Ardent · Posted Aug 12, 2026

Open

Remote
Remote
Full-time
8+ years

Apply with RefersoAI Apply on careers page

Application Security Engineer

Responsibilities

Perform application security testing and vulnerability assessments
Conduct application security testing using approved tools, processes, and techniques
Assess web applications, APIs, services, containers, dependencies, and delivery environments for security weaknesses
Support automated security scanning of applications, APIs, services, software dependencies, containers, and CI/CD pipelines
Configure and maintain security scanning tools used during development, build, test, release, and runtime activities

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
Nice to have: SonarQube
Nice to have: Nexus IQ
Nice to have: Checkmarx
Nice to have: Twistlock

Skills

application security testing vulnerability assessment secure coding practices static application security testing (SAST)

Senior Cloud Security Engineer

Acuity Inc. · Posted Nov 5, 2026

Open

Atlanta, Georgia, United States
Senior
5–8 years

Apply with RefersoAI Apply on careers page

We are seeking an experienced and hands-on Senior Cloud Security Engineer to join our Product Security Architecture and Operations team. This role will help secure cloud applications and solutions hosted on Microsoft Azure by partnering closely with engineering teams to assess cloud architectures, monitor internal and external threats, and identify potential vulnerabilities across cloud and internal environments.

Responsibilities

Lead security architecture reviews for Microsoft Azure applications, platforms, and services, identifying risks and recommending pragmatic, risk-based remediation strategies.
Drive CNAPP capabilities across Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Cloud Infrastructure Entitlement Management (CIEM), and Kubernetes and container security.
Assess identity and access architectures using Microsoft Entra ID and other identity providers, including Okta, and guide teams on secure authentication, federation, single sign-on, and least-privilege access for users and workloads.
Review and strengthen the use of Microsoft Entra service principals, Azure managed identities, workload identities, privileged access, and identity entitlement controls.
Evaluate security controls for AKS and Kubernetes environments, including image hardening, admission and runtime controls, secrets handling, network segmentation, and workload protection.

Requirements

Nice to have: Microsoft Defender for Cloud
Nice to have: Prisma Cloud
Nice to have: Wiz
Nice to have: Orca Security

Senior Cybersecurity Engineer - Applications

ConsultNet · Posted Nov 5, 2026

Open

Rockville, Maryland, United States +1 more
Hybrid
Full-time · Senior
5+ years

Apply with RefersoAI Apply on careers page

The role focuses on strengthening the security posture across the organization with a primary focus on application security, securing software, applications, and the environments where they are built and deployed.

Locations (2)

Rockville, Maryland, United States
United States

Responsibilities

Investigate, analyze, respond to, and recover from cybersecurity incidents, events, and threats following the incident response lifecycle.
Remediate application vulnerabilities and guide engineering and development teams on preventative measures.
Build security into the software development lifecycle, including static analysis, dynamic analysis, and software composition analysis within build and deployment pipelines.
Perform threat modeling and secure design reviews for new and existing applications, and provide security recommendations to development and architecture teams.
Represent security in architecture design reviews and the Change Advisory Board so security considerations are addressed before changes are approved.

Software Engineer II

Mastercard · Posted Oct 28, 2026

Open

O'Fallon, Missouri, United States
Mid
$92K–$147K per year

Apply with RefersoAI Apply on careers page

Design, build, test, deploy, and maintain software components, automation frameworks, and validation tools supporting Core Payments, Network Solutions applications and services.

Compensation

O'Fallon, Missouri: $92,000 - $147,000 USD

Responsibilities

Design, build, test, deploy, and maintain software components, automation frameworks, and validation tools supporting Core Payments, Network Solutions applications and services.
Develop microservices using Java and Spring Boot and work with relational SQL databases.
Apply data structures, algorithms, and efficient coding practices to build scalable solutions.
Contribute across the software development lifecycle, including deployment, monitoring, and ongoing maintenance.
Participate in software design and architecture discussions, applying established patterns to support scalability, reliability, and maintainability.

Requirements

Bachelor’s or master’s degree in Computer Science
Nice to have: Cloud and microservices architecture
Nice to have: Mainframe modernization
Nice to have: System reliability
Nice to have: Performance and scalability

Skills

Java Spring Boot

Aviation Software Engineer

SITEC Consulting · Posted Nov 4, 2026

Open

Patuxent River, Maryland, United States +1 more
On-site
Full-time · Mid

Apply with RefersoAI Apply on careers page

A journey-level software engineering role focused on software assurance for the H-1 Helicopter Program, evaluating software designs, reviewing source code, and ensuring mission-critical systems meet safety and security standards.

Locations (2)

Patuxent River, Maryland, United States
Lexington Park, Maryland, United States

Responsibilities

Review and evaluate software de-veloped by Original Equipment Manufacturers (OEMs) to ensure quality, reliability, and compliance with technical requirements.
Analyze source code, software architecture, repositories, and engineering practices to identify potential risks and recommend improvements.
Evaluate software testing results, automated test processes, code coverage, and verification activities to ensure system readiness.
Review software engineering deliverables, including Software Development Plans (SDPs), Software Design Descriptions (SDDs), Software Version Descriptions (SVDs), and test reports.
Assess secure coding practices, software vulnerabilities, static analysis results, and software security requirements.

Cyber Security Architecture Application Specialist

MSC Cruises · Posted Nov 4, 2026

Open

Naples, Campania, Italy
Hybrid
Full-time
€33K–€37K per year
2–5 years

Apply with RefersoAI Apply on careers page

Support the adoption of security-by-design principles across custom-developed and enterprise applications, embedding security controls throughout the software development lifecycle.

Compensation

Gross annual salary (RAL): between €33.000 – €37.000 gross per year, paid over 14 monthly installments

Responsibilities

Support the design and implementation of security controls and architectures for custom-developed, packaged, web, and mobile applications.
Collaborate with development, DevOps, architecture, and product teams to embed security-by-design principles throughout the Secure Software Development Lifecycle (SSDLC).
Support the adoption of DevSecOps practices and the integration of security controls into CI/CD pipelines, including SAST, DAST, software composition analysis, and secrets management.
Review application architectures and technical designs from a cyber security perspective, identifying security requirements and recommending appropriate controls.
Provide guidance on secure authentication, authorization, APIs, session management, cookies, tokens, and application integration security.

Requirements

A degree in computer science or engineering, cyber security, or a related qualification.
Nice to have: AI-enabled applications
Nice to have: AI-assisted development
Nice to have: Checkmarx
Nice to have: Akamai

Skills

Principal Cloud Security Engineer

HealthEquity · Posted Nov 3, 2026

Open

Remote, United States
Remote
Full-time · Principal
12+ years

Apply with RefersoAI Apply on careers page

As a Principal Cloud Security Engineer, Product Security, you provide technical leadership for the security of the cloud environments that host HealthEquity's products and platforms. You design posture management, policy-as-code guardrails, and automated controls.

Responsibilities

Lead the architecture and ongoing evolution of cloud security posture management across a large multi-subscription estate using CNAPP/CSPM tooling.
Design and build policy-as-code preventive guardrails, including service control policies, Azure Policy, and infrastructure-as-code validation in CI/CD.
Own the security architecture for cloud landing zones and account and subscription provisioning.
Build event-driven auto-remediation that enforces security and compliance baselines at scale.
Lead network exposure reduction for customer-facing applications, including web application firewall rule management and tighter security group ingress.

Requirements

Nice to have: GCP
Nice to have: Control Tower
Nice to have: Organizations
Nice to have: Security Hub
Nice to have: GuardDuty

Skills

Cloud Security Engineering AWS Azure

Senior DevSecOps Engineer

Betway Group · Posted Jul 23, 2026

Open

United Kingdom
Senior

Apply with RefersoAI Apply on careers page

Senior DevSecOps Engineer responsible for integrating and operating application security controls within CI/CD pipelines, supporting secure SDLC practices, threat modelling, vulnerability triage, and governance, risk & assurance activities for a digital gaming company.

Responsibilities

Integrate and operate application security controls within CI/CD pipelines
Support secure SDLC practices such as branch protection and quality gates
Assist with threat modelling and secure design reviews
Support developers in vulnerability triage and remediation
Tune security tools to reduce false positives

Requirements

Nice to have: Sports betting markets knowledge
Nice to have: Online gaming industry experience
Nice to have: Gambling regulations compliance
Nice to have: Customer retention strategies
Nice to have: Multinational environment experience

Skills

Static Application Security Testing Dynamic Application Security Testing Software Composition Analysis Secrets detection Dependency risk scanning

Software composition analysis jobs

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Locations (2)

Responsibilities

Compensation

Responsibilities

Requirements

Skills

Locations (2)

Responsibilities

Compensation

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Benefits

Skills

Requirements

Skills

Benefits

Benefits

Requirements

Skills

Benefits

Benefits