Senior Application Security Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Execute Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.

• Perform Static Application Security Testing (SAST) with Veracode and associated security tools.

• Detect, analyze, document, and validate application vulnerabilities.

• Aid in secure software development lifecycle (SSDLC) initiatives.

• Collaborate with development teams to suggest remediation strategies.

• Support enterprise-wide application security and vulnerability management programs.

• Assist in application security assessments for web applications, APIs, and relevant infrastructure.

• Create security reports, findings, risk assessments, and executive summaries.

• Facilitate continuous monitoring and compliance initiatives.

• Contribute to secure application architecture reviews and security design consultations.

⛳️ Requirements

• Over 6 years of experience in Information Technology, particularly in cybersecurity or application security.

• More than 3 years of experience with Java, Python, .NET, or C#.

• At least 3 years of experience utilizing Burp Suite DAST functionalities for Dynamic Application Security Testing.

• A minimum of 2 years of experience conducting SAST using Veracode or similar tools.

• Over 3 years of experience in designing and implementing organization-wide security controls.

• More than 3 years of experience in supporting Linux or UNIX environments.

• At least 2 years of experience with Veracode integration within development environments.

• Experience in securing enterprise web applications and frameworks.

• Familiarity with OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.

• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, and FedRAMP.

• Capability to obtain and maintain a Public Trust or Suitability/Fitness determination.

• High School Diploma or GED.

• Preferred: Experience with Interactive Application Security Testing (IAST) tools and methodologies.

• Preferred: Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field.

🏝️ Benefits

• Competitive benefits.

• 401(k) match.

• Professional development opportunities.

• Incentive plans with corporate and individual performance bonuses.

• 401K.

• PTO.

• Remote work options.

• Health and wellness programs.

• Employee discounts.

• Learning and development reimbursement.