Application Security Engineer

Application Security Engineer - Contract Location: Fully remote Employment Type: Three-month contract Openings: Two Compensation: $55-65 per hour Benefits: LaSalle Network consultants are eligible to enroll in benefits. For details, visit https://www.thelasallenetwork.com/consultants/ Position Overview LaSalle Network is partnering with a current client to hire two Application Security Engineers for a focused, three-month secrets remediation initiative. These engineers will help address an existing backlog of exposed secrets and hard-coded credentials within source code, partnering with software development teams to investigate findings and drive remediation. This opportunity requires hands-on application security experience, strong scripting skills and the ability to contribute with limited ramp-up. The engagement is expected to conclude after three months, with no anticipated extension or conversion to permanent employment. Key Responsibilities - Investigate exposed secrets and hard-coded credentials identified through GitHub secret scanning. - Assess findings involving cloud credentials, API keys, private keys and other secrets to determine the appropriate remediation approach. - Use existing scripts to validate whether identified credentials remain active. - Review, modify and improve existing validation scripts to increase efficiency; extensive automation development is not the primary focus. - Partner with software development teams and relevant credential owners to coordinate remediation, including rotation, revocation or cleanup as appropriate. - Draw on developers’ application knowledge to support investigations and resolve findings. - Track remediation progress and communicate findings, dependencies and blockers. - Manage assigned work independently and maintain strong follow-through throughout the engagement. Required Qualifications - Three or more years of hands-on application security experience. - Experience investigating and remediating exposed secrets or hard-coded credentials within source code repositories. - Strong scripting experience in at least two of the following: PowerShell, Bash and Python. - Strong Git/GitHub knowledge and experience supporting engineering remediation projects. - Ability to understand and improve existing scripts. - Strong communication and collaboration skills, including experience working directly with software developers. - Ability to manage competing priorities and drive findings through resolution within a short-term engagement. Preferred Qualifications - Experience with GitHub Advanced Security secret scanning. - Experience investigating multiple credential types, including cloud credentials, API keys and private keys. - Healthcare or revenue cycle management experience. Candidates from other industries are welcome. Compensation The anticipated hourly pay range is $55-$65 per hour, based on relevant experience and qualifications. Interview Process One video panel interview with the hiring manager and a technical team member, covering technical and behavioral questions. Apply Today If you have hands-on application security experience and enjoy partnering with developers to resolve security risks, apply today.