Senior Application Security Engineer, Burp Suite DAST

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as a dedicated technical partner integrated within a federal financial regulatory agency’s application security team.

• Manage the enterprise application security testing program utilizing Burp Suite DAST (Enterprise).

• Configure, schedule, and execute dynamic application security scans, including authenticated scans across the application portfolio.

• Develop and maintain scan integrations within development environments and CI/CD pipelines, including Eclipse, JDeveloper, and Veracode pipeline scanning.

• Navigate Linux/UNIX systems and resolve basic website connectivity issues that impact scanning.

• Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services.

• Map findings to standards such as OWASP Top 10, CVSS, CWE, WASC, and SANS-25.

• Align application security initiatives with NIST 800-53, FIPS, and FedRAMP compliance.

• Engage in a fully remote role supporting a federal government client.

• Minimal travel required.

⛳️ Requirements

• A minimum of 6 years of experience in Information Technology, particularly in cybersecurity or application security.

• At least 3 years of experience with programming languages such as Java, Python, .NET, or C#.

• A minimum of 3 years of experience using Burp Suite DAST for Dynamic Application Security Testing (DAST).

• At least 2 years of experience with Static Application Security Testing (SAST) utilizing tools like Veracode.

• A minimum of 3 years of experience in designing and implementing enterprise-wide security controls to protect applications, systems, networks, or infrastructure services.

• At least 3 years of experience working with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues.

• A minimum of 2 years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration.

• Experience in securing enterprise web applications and frameworks, including knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS-25.

• Familiarity with federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.

• Preferred experience with Interactive Application Security Testing (IAST) capabilities and tools.

• High school diploma or GED required; Bachelor's Degree preferred.

• Educational qualifications can be substituted with relevant experience.

• Public Trust / Suitability; selected candidates will undergo a security investigation.

• Must be a U.S. Citizen. No exceptions.

• Available during core hours from approximately 7:30 AM to 4:30 PM US Eastern Time, Monday through Friday.

• Expected workday of 8.5 hours with a 30-minute break.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Vision Insurance

• Life Insurance

• Short Term & Long Term Disability

• 401k Retirement Savings Plan with Company Match

• Paid Holidays

• Paid Time Off (PTO)

• Tuition and Professional Development Assistance