Application Security Engineer
Core
Investigate, validate, and remediate exposed secrets and credentials in GitHub repositories to close a security backlog.
Role type
Application Security Engineer (Secrets Remediation)
Builds
Remediation of credential exposure in source code repositories
Domain
Application Security / DevSecOps / Cloud Security
Required skills
Secret scanning investigation, Credential risk assessment, GitHub repository analysis, GitHub REST API usage, Scripting (PowerShell/Bash/Python), Remediation coordination, Backlog management, Secure credential rotation
Preferred skills
GitHub Advanced Security (Enterprise), AWS Secrets Manager, Azure Key Vault, CI/CD pipeline security, Cloud identity services, Access token management
Technologies
GitHub, AWS, Azure, PowerShell, Bash, Python, REST API, CI/CD
Responsibilities
Review and triage automated secret-scanning findings, Investigate repository history for credential validity and risk, Coordinate remediation with development and platform teams, Execute credential revocation and rotation, Document findings and closure rationale, Escalate high-risk credentials, Use scripting to automate reporting and enrichment
Seniority
Mid-level, hands-on IC
