Application Security Engineer SME I

Edgesource Corporation•Alexandria, VA

1d•Hybrid

About The Position

The Application Security Engineer (SME I) supports the security, integrity, and compliance of enterprise applications, systems, and services across customer environments. This role applies strong foundational expertise in secure coding, threat modeling, and vulnerability management, while assisting in embedding security into CI/CD pipelines and leveraging automation and RPA tools to scale security processes. The SME I partners with senior engineers to help drive adoption of security best practices across different teams.

Requirements

Must be able to obtain and maintain a favorable contractor fitness determination.
3–5 years of experience in application security, software development, or cybersecurity engineering
Foundational knowledge of secure coding practices, OWASP Top 10, and threat modeling concepts
Experience with application security testing tools (SAST, DAST, SCA, or similar)
Familiarity with CI/CD pipelines and DevSecOps practices
Exposure to or basic experience with RPA tools (UiPath, Automation Anywhere, or similar)
Understanding of vulnerability management processes and tools
Strong analytical and problem-solving skills

Nice To Haves

Familiarity with federal security frameworks (NIST, FISMA, Zero Trust principles)
Familiarity with software supply chain / component risk tooling such as NexusIQ.
Familiarity with code quality/security tooling such as SonarQube (and using results to drive remediation and policy gates)

Responsibilities

Support the design and implementation of secure application architectures under guidance from senior engineers.
Apply secure coding practices and assist in threat modeling and vulnerability assessments.
Conduct and support application security testing (SAST, DAST, SCA, and manual reviews).
Assist in integrating security controls into CI/CD pipelines, including automated testing and scanning.
Leverage automation and RPA tools to improve efficiency in vulnerability tracking, reporting, and remediation workflows.
Support implementation of security controls and policy gates aligned with organizational standards.
Participate in the vulnerability management lifecycle, including identification, triage, and remediation tracking.
Conducts vulnerability assessments.