Apply on Employer Site

Marathon TS · 16 hours ago

Application Security Engineer Fortify

United States

Contract

Remote

Mid Level

Marathon TS is seeking a hands-on Application Security / DevSecOps Engineer with a strong software development background for a short-term engagement. The role focuses on implementing and configuring application security scans using the Fortify scanning platform within an Azure DevOps CI/CD environment.

Information ServicesProfessional NetworkingProfessional ServicesTechnical Support

Growth Opportunities

Hiring Manager

Timothy Nealon

Responsibilities

Design, configure, and implement Fortify static (SAST) scans within Azure DevOps pipelines

Integrate Fortify scanning into existing CI/CD workflows (build, test, deploy stages)

Configure scan parameters, rulesets, thresholds, and policies aligned to best practices

Optimize scans for performance, accuracy, and minimal pipeline disruption

Troubleshoot scan failures, false positives, and pipeline integration issues

Support initial scan execution and validation across multiple codebases

Work closely with software engineers to:

Align scanning with development workflows

Ensure scans are developer-friendly and actionable

Provide guidance on secure coding practices and vulnerability remediation

Help define 'shift-left' security patterns within Azure DevOps

Create clear, well-structured best-practice documentation, including:

Fortify scan setup and configuration guides

Azure DevOps pipeline integration instructions

Standard operating procedures (SOPs) for running and maintaining scans

Guidance for developers on interpreting scan results

Produce documentation suitable for:

Engineering teams

Security teams

Future onboarding and sustainment

Qualification

Fortify application security scanningAzure DevOps pipelinesSoftware developmentCI/CDSecure SDLC practicesYAML pipelinesStatic code analysis toolsVulnerability remediation workflowsTechnical documentationCommunication skills