Application Security Engineer — Java / Node.js

Job overview

The Application Security Engineer — Java / Node.js is listed in Saint Louis, MO; the posting does not specify a work arrangement. Compensation is not specified. The role partners with InfoSec, QA, DevOps, and engineering teams to improve application security. The engineer remediates vulnerabilities, reduces technical debt, and strengthens application and cloud environments. The work includes secure coding, dependency and configuration hardening, regression validation, CI/CD security automation, and GenAI-assisted remediation workflows.

What you'll do

• Triage and remediate findings from SAST, DAST, and SCA tools
• secure Java, Node.js, Ruby on Rails, and WordPress applications against OWASP risks
• patch dependencies and harden configurations
• validate fixes through regression testing and user-flow checks
• integrate security remediation into CI/CD pipelines
• build GenAI-assisted remediation workflows using AWS Bedrock or similar tools
• modernize legacy components and harden cloud, container, and operating-system environments
• collaborate with InfoSec and QA to close findings and rescans.

What we're looking for

Skills & competencies

application security

java

node.js

spring boot

owasp

sast

dast

sca

ci/cd

aws

saint louis mo

the giant bullseye

Work arrangement

• Weekend coverage required

Why this role

The role includes GenAI-assisted remediation workflows and security work across multiple application platforms.

About the employer

The Giant Bullseye is hiring for this role. Industry: Engineering Services. Sector: 54.