Application Security Engineer, Lead

Booz Allen Hamilton•Colorado Springs, CO

1d•$99,000 - $225,000•Remote

About The Position

As a Lead Application Security Engineer on our team, you’ll use your experience with implementing and integrating information systems, including routing and switching technologies. You’ll develop enterprise-wide infrastructure, troubleshoot and resolve complex network issues, analyze working infrastructures, and increase security, reliability, and availability for mission-critical network systems. Your knowledge of network protocols, equipment, emerging technology, and configurations will come in handy as you optimize client operations and modernization. Using your technical curiosity and knowledge of industry standards, you’ll make an impact on national security missions.

Requirements

5+ years of experience implementing application security services such as macro-segmentation, micro-segmentation, application-aware firewalls, and Web Application Firewalls (WAF)
5+ years of experience with next-generation firewalls, such as Palo Alto, or Cisco, or Fortninet, or Juniper, or Illumio
5+ years of experience with application delivery products, such as F5, Nginx, A10, or NetScaler
Experience leading cross-functional teams across various technologies and environments
Experience with DoD enterprise networks, such as defense infrastructure, including DMZ and application security
Secret clearance
HS diploma or GED

Nice To Haves

Experience with Palo Alto Next-Generation Firewalls and Panorama
Experience with F5 BIG-IP Application Security Manager (ASM) and Advanced Web Application Firewall (AWAF)
Experience securing enterprise web applications to be compliant with OWASP Top 10, CVSS, CWE, WASC, and SANS-25
Experience working with Infrastructure-as-Code (IaC) tools, including Terraform and deploying IaC with VS Code
Knowledge of Azure Cloud and AWS Cloud environments
Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5/6

Responsibilities

Implementing and integrating information systems, including routing and switching technologies.
Developing enterprise-wide infrastructure.
Troubleshooting and resolving complex network issues.
Analyzing working infrastructures.
Increasing security, reliability, and availability for mission-critical network systems.
Optimizing client operations and modernization.