Senior Application Security Engineer

Requisition #: 1858

Job Title: Senior Application Security Engineer

Location: Remote

Clearance Level: Must be able to obtain and maintain a Public Trust Clearance

• Bachelor's degree in Systems Engineering, Computer Science, or related field, and 4+ years of experience, or equivalent relevant work experience; e.g., each year of work experience may be substituted for each year of education required. 

• Ability to obtain and maintain a Public Trust Clearance which requires U.S. citizenship. 
• 1+ year of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode .
• 2+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• 2+ years experience working in Linux based environments, including navigating and troubleshooting basic website connectivity issues 
• Familiarity in Linux environment and some type of coding and/or scripting experience is a must.
• The areas of focus for this role are Burp Enterprise experience performing DAST scanning. 
  • Experience with Burp Professional, with focus on SAST scanning.
  • Veracode experience performing SAST scanning.

• Experience with Interactive Application Security Testing (IAST) capabilities and tools.
• Experience with HackerOne.
• Experience with Selenium.
• Experience writing bash scripts.
• Experience with OWASP ZAP or Burp Proxy