AppSec Engineer

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Become a part of a mission-driven Department of Defense program where your expertise in application security plays a key role in enhancing national defense.

• Take charge of SAST operations utilizing Fortify, which includes full responsibility for triaging findings and tracking remediation.

• Supervise SonarQube for ongoing code security analysis and governance of quality gates.

• Manage and carry out DAST testing along with runtime vulnerability assessments.

• Strategize, lead, and execute penetration testing initiatives across diverse application platforms.

• Conduct secure code reviews and provide guidance to developers on remediation strategies.

• Oversee the tracking, verification, and resolution of application vulnerabilities.

• Create and uphold standards for AppSec assessments and reporting on penetration tests.

• Promote compliance with the secure development lifecycle (SDLC) across the assigned application portfolios.

• Mentor junior and mid-level AppSec engineers, encouraging their technical development and excellence.

• Act as the AppSec representative to the Cybersecurity Architect to further the program-wide SDLC security strategy.

⛳️ Requirements

• Must possess an active Secret clearance.

• Have 6–9 years of experience in application security, penetration testing, or secure software development.

• Exhibit advanced proficiency with Fortify and SonarQube.

• Proven experience in leading penetration testing initiatives and conducting secure code reviews.

• Strong understanding of vulnerabilities related to web applications, APIs, and mobile applications.

• Demonstrated capability to mentor and develop junior AppSec engineers.

• Hold a DoD 8140.03M DCWF Intermediate Tier certification — any of the following: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+.

• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering.

🏝️ Benefits

• Healthcare

• Wellness

• Financial support

• Retirement plans

• Family assistance

• Continuing education opportunities

• Time off benefits