Application Security Engineer SME II

Edgesource Corporation•Alexandria, VA

2d•Hybrid

About The Position

We are seeking an experienced Application Security Engineer SME II to advance secure development practices across enterprise applications, with a strong focus on automation, RPA (Robotic Process Automation), and vulnerability management. This role combines deep application security expertise with hands-on automation capabilities to proactively identify, remediate, and prevent security risks in both traditional and automated (bot-driven) environments.

Requirements

Must be able to obtain and maintain a favorable contractor fitness determination.
6+ years of experience in application security, secure coding, cybersecurity engineering, or vulnerability management.
Strong understanding of application security principles.
Familiarity with RPA platforms (UiPath, Automation Anywhere, Blue Prism) and associated security risks.
Experience integrating security into CI/CD pipelines.
Strong knowledge of API security, authentication/authorization (OAuth2, SAML, JWT)
Experience with vulnerability management tools (e.g., Tenable, Qualys, Rapid7)

Nice To Haves

Relevant certifications (e.g., CISSP, CSSLP, CEH, OSCP, GWAPT, Azure/AWS Security)
⁠Background in establishing security governance, risk, and compliance (GRC) processes

Responsibilities

Serve as a Subject Matter Expert (SME) for application security, providing guidance on secure design, development, and deployment practices.
Lead security assessments of web applications, APIs, and RPA solutions (UiPath, Automation Anywhere, Blue Prism)
Identify, analyze, and prioritize application and automation-related vulnerabilities.
Design and implement automated security controls and testing within CI/CD pipelines.
Develop and maintain security automation scripts/tools to streamline vulnerability detection and remediation.
Integrate security practices into RPA development lifecycle, ensuring bots follow secure coding and credential management standards.
Perform threat modeling and risk assessments for applications and automated workflows.
Partner with development, DevOps, and RPA teams to remediate vulnerabilities and improve security posture.