Application Security Engineer
About The Position
The Application Security Engineer supports the integration of security into the software development lifecycle. The role collaborates with development and infrastructure teams to assess application risks, help remediate vulnerabilities, and maintain application security. It is intended for a mid-level practitioner seeking to deepen technical experience. The first two months are expected to focus on reviewing vulnerabilities, following up with technical teams, creating Power BI reports, opening ServiceNow tickets, and automating data with Python. The following three months are expected to emphasize DevSecOps, SAST/DAST, Azure, and automation. This is a contract position based in Washington, DC, with a hybrid workplace. The stated pay range is $35.00–$40.00 per hour. Benefits may be available if eligibility requirements are met and may include medical, dental, and vision coverage; critical illness, accident, and hospital coverage; a 401(k) retirement plan; life insurance; short- and long-term disability; a health spending account; transportation benefits; an employee assistance program; and time off or leave.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience.
- The posting states “35 years” of experience in cybersecurity or application security roles; the additional requirements section specifies 3+ years of DevSecOps experience.
- Familiarity with security frameworks and standards such as OWASP Top 10 and NIST.
- Experience with at least one programming language, such as Java, Python, or .NET, and scripting.
- Hands-on programming experience; at minimum, the ability to read code and make minor code changes.
- Understanding of secure architecture principles for web and cloud-based applications.
- Exposure to security testing tools and techniques, such as static or dynamic analysis and penetration testing.
- Experience with SAST and DAST code scanning.
- Strong communication and collaboration skills.
- Azure platform and Azure DevOps experience.
- Ability to automate tooling and an understanding of DevSecOps practices.
- Power BI user experience, including the ability to create reports.
- ServiceNow user-level ticketing experience.
Nice To Haves
- Security certifications such as SSCP or Security+, or working toward CISSP or a similar certification.
- Experience with the ServiceNow platform.
- Knowledge and experience with Azure cloud and Azure DevOps.
- Knowledge and experience with Power BI.
- Past development experience, preferably with .NET or Python; Java experience is also considered.
- Experience with HCL AppScan for SAST and Burp Suite for DAST.
Responsibilities
- Collaborate with development teams to promote secure coding practices and help identify and mitigate security vulnerabilities.
- Contribute to Secure SDLC standards, including security requirements for application design and development.
- Assist with integrating SAST, DAST, and SCA tools into CI/CD pipelines.
- Review security testing results and support remediation of identified vulnerabilities.
- Help implement security controls for applications deployed in on-premises and cloud environments.
- Participate in threat modeling and security design reviews under the guidance of senior engineers.
- Support secure-development training and knowledge sharing within engineering teams.
- Stay current with emerging security threats, vulnerabilities, and industry best practices.
- Review vulnerabilities and follow up with technical teams.
- Create Power BI reports on vulnerabilities by division, application, or severity, and create ServiceNow tickets.
- Automate data-related tasks using Python.
Benefits
- Medical insurance, if eligible.
- Dental insurance, if eligible.
- Vision insurance, if eligible.
- Critical illness, accident, and hospital coverage, if eligible.
- 401(k) retirement plan with pre-tax and Roth post-tax contributions available, if eligible.
- Voluntary life and AD&D insurance for the employee and dependents, if eligible.
- Short- and long-term disability coverage, if eligible.
- Health Spending Account (HSA), if eligible.
- Transportation benefits, if eligible.
- Employee Assistance Program, if eligible.
- Time off or leave, which may include PTO, vacation, or sick leave, if eligible.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Mid Level
