Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and refine integrated systems that support enterprise-wide digital transformation efforts.

• Create comprehensive solutions aimed at improving system reliability, scalability, and security.

• Lead the assessment of new technologies and system architectures.

• Offer strategic insights to bolster organizational capabilities.

• Conduct application security testing and scanning utilizing Burp Enterprise, Burp Professional, and Veracode.

⛳️ Requirements

• A Bachelor's degree in Systems Engineering, Computer Science, or a related discipline, along with 4+ years of experience, or an equivalent combination of relevant work experience; each year of work experience may be substituted for one year of educational requirement.

• Must be eligible to obtain and maintain a Public Trust Clearance, which necessitates U.S. citizenship.

• At least 1 year of experience in supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode.

• A minimum of 2 years of experience with Java, Python, .NET, or C#.

• Over 3 years of experience in designing and implementing enterprise-wide security controls for applications, systems, networks, or infrastructure services.

• Proficiency in using Eclipse, JDeveloper for pipeline development, or Visual Studio.

• Experience in securing enterprise web applications and familiarity with OWASP Top 10, CVSS, CWE, WASC, and SANS-25.

• Understanding of federal compliance standards, such as NIST 800-53, FIPS, or FedRAMP.

• More than 2 years of experience working in Linux-based environments, including the ability to navigate and troubleshoot basic website connectivity issues.

• Familiarity with Linux environments and coding and/or scripting skills.

• Experience with Burp Enterprise for DAST scanning.

• Proficiency in Burp Professional, specifically focusing on SAST scanning.

• Experience with Veracode for SAST scanning.

• Preferred: Experience with IAST capabilities and tools.

• Preferred: Experience using HackerOne.

• Preferred: Experience with Selenium.

• Preferred: Skills in writing bash scripts.

• Preferred: Familiarity with OWASP ZAP or Burp Proxy.

🏝️ Benefits

• Health Insurance

• Life Insurance

• Paid Time Off

• Holiday Pay

• Short-term and long-term Disability

• Retirement

• Learning and Development opportunities

• Other optional benefit elections