Code Security Engineer C2C jobs Cincinnati, OH Onsite

Key Responsibilities

• Administer and support SAST, SCA, and API Security platforms.
• Configure, maintain, and optimize security scanning and runtime monitoring capabilities.
• Analyze security findings and assist development teams with vulnerability remediation and risk reduction.
• Provide end-user support, troubleshooting, and onboarding assistance for security tools and related processes.
• Monitor platform health, scan coverage, performance metrics, and operational effectiveness.
• Design and develop integrations between security platforms, CI/CD pipelines, reporting systems, and other enterprise tools.
• Build automation and one-off solutions to improve security workflows and reduce operational overhead.
• Utilize Infrastructure as Code (IaC) practices to deploy and manage tooling and supporting infrastructure.
• Develop dashboards, metrics, and reporting to support security program visibility and decision-making.
• Collaborate with development, DevOps, and security teams to integrate security into engineering workflows.
• Contribute to security tooling roadmaps, enhancement efforts, and operational improvements.

Required Qualifications

• Experience with:
• API Security
• Software Composition Analysis (SCA)
• Static Application Security Testing (SAST)
• Experience providing end-user support and troubleshooting technical issues.
• Experience with Terraform or similar Infrastructure as Code technologies.
• Proficiency in one or more modern programming languages:
• Javascript
• Python
• Experience developing automation, integrations, or operational tooling.
• Understanding of secure software development lifecycle (SSDLC) principles and application security practices.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Unit testing experience.
• Experience writing one-off automation and data-processing scripts.
• Amazon Web Services (AWS) experience.
• Power BI experience.
• Windows Server administration experience.
• Familiarity with CI/CD pipelines, API gateways, and DevOps practices.