Cloud Application Software Security Engineer
St. Louis, MO
Category: Security
Industry: Financial Services
Standard Hours: Open
Reference ID: JN -092026-108515
Date Posted: 09/08/2026
Shortcut: http://careers.eliassen.com/AUqu5Z
Description:
Hybrid 4 days on-site, 1 day work from home in St. Louis, MO
Our client seeks a Cloud Application Software Security Engineer to remediate vulnerabilities and mature SDLC pipelines. The role will focus on addressing findings from Mythos, CVE and Known Exploited Vulnerabilities, and open HVA and SA&A assessments. The engineer will collaborate with development and platform teams to reduce risk across custom application code and infrastructure as code in AWS.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $75.00 to $85.00/hr. w2
Responsibilities:
- Conduct security assessments using scanning tools and implement recommended remediations.
- Evaluate and remediate Known Exploited Vulnerabilities (KEVs) and Common Vulnerabilities and Exposures (CVEs) in custom applications and infrastructure.
- Support Security Assessment and Authorization (SA&A) processes, including documentation and evidence collection.
- Analyze Software Bill of Materials (SBOM) findings to identify vulnerable dependencies and recommend updates or alternatives.
- Review and remediate security vulnerabilities in VB.NET, SQL, and Python code.
- Perform security analysis and hardening of AWS Cloud Development Kit (CDK) infrastructure as code.
- Collaborate with development teams to implement secure coding practices and address identified vulnerabilities.
- Maintain security documentation and track remediation efforts through completion.
- Ensure compliance with federal security standards and frameworks such as NIST, FISMA, and FedRAMP within AWS GovCloud.
- Participate in security scanning automation and continuous monitoring initiatives.
Experience Requirements:
- 3 to 5 years in application security or software development with a security focus.
- Proven experience with vulnerability assessment and remediation methodologies.
- Proficiency with Python, SQL, and VB.NET or legacy .NET frameworks.
- Experience with AWS CDK or similar IaC tools such as Terraform or CloudFormation.
- Hands-on experience in AWS environments, preferably AWS GovCloud.
- Experience with AWS security services such as GuardDuty, Security Hub, Inspector, and Config.
- Understanding of CVE and KEV identification and remediation processes.
- Knowledge of SBOM generation and analysis.
- Experience with SAST, DAST, and penetration testing.
- Strong analytical and problem-solving skills.
- Strong written and verbal communication skills.
- Preferred: Security certifications such as CISSP, CEH, GIAC GSEC, or AWS Security Specialty. Knowledge of container security, CI/CD pipeline security, DevSecOps practices, SSDLC, and zero trust principles.
Education Requirements:
Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field, or equivalent work experience.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Senior Cybersecurity Engineer
Anywhere
Description: Remote in either Remote or Washington, DC Our client is seeking a hands-on Senior Cybersecurity Engineer to help strengthen and scale cybersecurity practices across a growing software organization supporting mission-critical environments. ...
Date Posted: 08/19/2026 Recommended
-
Senior Security Engineer
Los Angeles, CA
Description: Hybrid Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client is seeking an experienced Senior Security Engineer with a focus on security architecture assessments across on-premises and Azure environm...
Date Posted: 08/20/2026 Recommended
-
Lead Data Engineer
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Lead Data Engineer to own architecture and delivery of scalable data platforms on AWS. The role will lead design of data lakes and warehouses, govern IAM and security, and implement resilient...
Date Posted: 09/09/2026 Recommended
-
Software Engineer III
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a senior software engineer to provide application support, maintenance, enhancement, and operational oversight for a business-critical physical security and access management platform...
Date Posted: 09/09/2026 Recommended
-
Full Stack Engineer
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Englewood, CO Our client seeks a Full Stack Engineer to design, build, and enhance scalable video delivery platforms and applications for streaming and media experiences. The role spans backend service...
Date Posted: 09/13/2026 Recommended
-
GCP Cloud/Data Architect
Anywhere
Description: Remote Our client is undertaking a strategic cloud and data transformation initiative, migrating from AWS to Google Cloud Platform (GCP). This effort includes decommissioning an existing Snowflake environment hosted on AWS, standing up mod...
Date Posted: 08/30/2026 Recommended
-
Senior AWS Cloud Architect/Engineer
Reston
Description: On-site in Reston, VA As a Senior AWS Cloud Architect/Engineer, you will be a key player in architecting, designing, and implementing cloud solutions that empower our clients to leverage the full potential of cloud technologies. You will b...
Date Posted: 08/25/2026 Recommended
-
AWS Cloud Data Engineer
Nashville, TN
Description: On-site in Nashville, TN Our client seeks a mid-level Cloud Data Engineer to design, build, and maintain scalable data solutions on AWS and Databricks. The role requires hands-on engineering, sound cloud architecture knowledge, and collabo...
Date Posted: 09/13/2026 Recommended
-
Security Engineer, Incident Response
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client has an opportunity for a Security Engineer, Incident Response on an initial 3-month contract with expected extensions. The role will provide additional coverage while full-time team me...
Date Posted: 09/14/2026 Recommended
-
Senior Software Engineer
St. Louis, MO
Description: Hybrid 4 days in office in St. Louis, MO Our client seeks a hands-on Senior Software Engineer to modernize and maintain a mission-critical enterprise application in AWS GovCloud. The role focuses on practical engineering, reliability, and ...
Date Posted: 09/17/2026 Recommended
-
AWS AI Platform Engineer
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks an AWS AI Platform Engineer to enable and advance enterprise AI and machine learning capabilities within a secure, governed, and scalable environment. The role will architect, implement, and maint...
Date Posted: 09/08/2026 Recommended
-
Full Stack Software Engineer - API Platform Engineering
Greenwood Village, CO
Description: Hybrid 4 days onsite, 1 remote in Greenwood Village, CO Our client seeks a Full Stack Software Engineer to build and operate a modern API platform. The team treats APIs as products with clear contracts, observability, documentation, and ow...
Date Posted: 08/24/2026 Recommended
-
Director of Cloud Infrastructure and Engineering
Owing Mills, MD
Description: Hybrid up to three days per week from home in either Owing Mills, MD or Baltimore, MD Our client seeks a Director of Cloud Infrastructure and Engineering to lead a globally distributed team that designs, develops, and deploys cloud infrast...
Date Posted: 09/01/2026 Recommended
-
Fullstack Software Engineer IV
Charlotte, NC
Description: Hybrid Charlotte, NC Our client seeks a Backend-focused Fullstack Software Engineer to accelerate delivery within the Emerging Digital organization. The role will support the ACE workflow application, which relies on Temporal workflows and...
Date Posted: 08/24/2026 Recommended
-
Cloud Infrastructure Engineer
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Greenwood Village, CO Our client seeks a Cloud Infrastructure Engineer to own the lifecycle of Kubernetes-based infrastructure on AWS. You will design and manage EKS clusters, build and maintain GitLab...
Date Posted: 09/01/2026 Recommended
-
Data Engineer
Anywhere
Description: Remote Our client seeks a senior Data Engineer to help launch a new initiative within Identity and Access Management. The contractor will build and evolve low-latency GraphQL APIs and data pipelines that support developer workflows across ...
Date Posted: 09/08/2026 Recommended
-
Senior Software Engineer
Boston, MA
Description: Hybrid At least 2 days per week in office in Boston, MA Our client seeks a Senior Software Engineer to join the team and lead design, delivery, and technical strategy for scalable, secure, and reliable data platforms. You will work across ...
Date Posted: 09/13/2026 Recommended
-
Senior Data Engineer
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior Data Engineer to lead database architecture, data migration, and real-time data product initiatives supporting a modern cloud-based platform. The role will establish a scalab...
Date Posted: 09/13/2026 Recommended
-
Senior Software Engineer IV
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Senior Software Engineer to build and evolve enterprise AWS-based data platforms supporting Swift and Fabric Access Bridge. The role combines hands-on engineering with technical leadership ac...
Date Posted: 08/30/2026 Recommended
-
Senior Java Developer
Boston, MA
Description: On-site 4 days onsite in Boston, MA Our client seeks a Senior Java Developer to build a new cloud-based application. The consultant will design and develop services and APIs using Java, Spring Boot, and microservices on AWS. The role requi...
Date Posted: 08/22/2026 Recommended
-
Backend Engineer
Anywhere
Description: Remote Our client seeks a Backend Engineer with 1 to 4 years of experience to develop and maintain server-side applications and services. The role requires proficiency in Java, Spring, and AWS. The engineer will build scalable APIs, integr...
Date Posted: 09/02/2026 Recommended
-
Data Scientist, Prompt Engineering & LLMs
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Greenwood Village, CO Our client seeks data scientists focused on prompt engineering, large language models, and A/B testing. You will design, develop, and optimize prompts for AI applications with emp...
Date Posted: 09/13/2026 Recommended
-
Staff (Lead) Software Engineer
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client seeks a Staff (Lead) Software Engineer to build the next generation of intelligent infrastructure for the Studio Digital Supply Chain. The role blends backend engineering, workflow, an...
Date Posted: 09/06/2026 Recommended
-
Sr AI Engineer- Physical AI
1000 Lowe's Blvd
Description: Hybrid 3/2 in either Charlotte, NC or Seattle, WA Our client is seeking a Senior AI Engineer to lead the development and operationalization of Physical AI systems across stores and supply chain. The role spans robotics, computer vision, ma...
Date Posted: 09/13/2026 Recommended
-
Digital Forensics Specialist
Alexandria, VA
Description: Hybrid 2-3 days per week on-site in Alexandria, VA. Our client seeks a digital forensics specialist to conduct network and media investigations that support incident response, threat analysis, and enterprise security operations. The role w...
Date Posted: 08/30/2026 Recommended
-
AI Engineer
Anywhere
Description: Remote Our client is modernizing its platform with AI-native capabilities. You will be the second engineer in a two-person enablement pod, embedded with solution teams to co-build LLM-powered features and transfer knowledge. You will partn...
Date Posted: 09/15/2026 Recommended
-
Quality Assurance Analyst
Boston, MA
Description: Hybrid 4 days onsite in either Boston, MA or Woodbridge, NJ Our client seeks a Quality Assurance Analyst to develop and execute test plans, improve coverage with AI-assisted techniques, and support a fast-paced QA organization across multi...
Date Posted: 08/27/2026 Recommended
-
Junior Penetration Tester
Anywhere
Description: Remote Our client seeks a Junior Penetration Tester to support security assessments across web applications, infrastructure, cloud environments, and related technologies connected to the client network. The role will develop test plans, pe...
Date Posted: 09/15/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 08/25/2026 Recommended
-
Business Continuity Analyst
Anywhere
Description: Remote Our client seeks a Business Continuity Analyst to modernize Business Continuity and Operational Resilience. The role will leverage existing continuity plans, recovery documentation, vendor data, policies, and operational knowledge t...
Date Posted: 08/26/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above