Application Security Remediation Engineer

Arctiq · New York, United States · 1 mo ago

Information TechnologyContract

Position Overview

Arctiq is seeking an Application Security Remediation Engineer to support the customer's vulnerability remediation initiative across multiple application platforms and technology stacks. This role focuses on resolving code-level vulnerabilities, upgrading dependencies, securing container images, and implementing sustainable remediation patterns within enterprise software environments. The consultant will work directly alongside the customer's software engineering teams to remediate vulnerabilities identified through Wiz across .NET, Java, Go, PHP, Node.js, SQL Server, and MySQL workloads while ensuring compatibility, stability, and operational continuity.

Responsibilities

Analyze and remediate application-level vulnerabilities identified by Wiz
Resolve code vulnerabilities within .NET, Java, PHP, Go, and Node.js applications
Upgrade vulnerable libraries, frameworks, packages, and third-party dependencies
Perform compatibility and regression testing for upgraded software components
Remediate container image vulnerabilities and insecure build configurations
Modernize and rebuild affected images to comply with organizational security standards
Work with development teams to incorporate secure coding practices
Address insecure configurations within application runtimes and frameworks
Validate completed remediations and ensure findings are accurately resolved within Wiz
Design and document reusable remediation patterns for recurring vulnerability classes
Support secure software delivery through DevSecOps and CI/CD integration
Collaborate with SRE, cloud, platform, and security teams throughout remediation activities

Qualifications

Strong software engineering experience in one or more of .NET/C#, Java, Go, PHP, or Node.js
Experience working with enterprise-scale application environments
Experience remediating application vulnerabilities and applying secure coding practices
Strong understanding of OWASP Top 10 vulnerabilities and software supply-chain security
Experience upgrading third-party libraries, frameworks, packages, and application dependencies
Docker and container image remediation experience
Kubernetes application deployment and container security experience
Experience with SQL Server and/or MySQL, including application-to-database security fundamentals
CI/CD pipeline integration, Git-based workflows, and Secure Software Development Lifecycle practices
Experience with automated security testing, SAST, SCA, and dependency-management tooling
Experience with vulnerability management programs and prioritization of Critical and High findings
Experience using Wiz, Snyk, Veracode, Checkmarx, SonarQube, or similar tools
Strong debugging, analytical, root-cause investigation, documentation, and communication skills

Preferred Qualifications

Hands-on Wiz experience
Experience securing containerized microservices architectures
Cloud-native application development experience
Experience with Amazon EKS and Kubernetes
Secure coding or application-security certifications
Experience in healthcare, payments, or other regulated industries

Tools and Technologies