Application Security Engineer, Lead

Booz Allen Hamilton•Colorado Springs, CO

2d•$99,000 - $225,000•Hybrid

About The Position

As a Lead Application Security Engineer, you will implement and integrate information systems and security services, develop enterprise-wide infrastructure, troubleshoot complex network issues, and analyze existing infrastructure. You will help improve the security, reliability, and availability of mission-critical network systems while supporting client operations and modernization. The work contributes to national security missions. The position is hybrid and based in Colorado Springs, Colorado. Employees are expected to work from a Booz Allen or customer facility in alignment with leadership expectations and role needs. A Secret clearance is required. Applicants selected may also be subject to a security investigation and must meet eligibility requirements for access to classified information. The projected annualized compensation range is $99,000 to $225,000. Booz Allen describes its benefits as including health, life, disability, financial, and retirement benefits; paid leave; professional development; tuition assistance; work-life programs; dependent care; and recognition awards. Eligibility for benefit programs depends on hours worked.

Requirements

At least 5 years of experience implementing Zero Trust-compliant application and network security services and controls.
At least 5 years of experience with next-generation firewalls such as Palo Alto, Versa, Cisco, Fortinet, or Juniper.
At least 5 years of experience with application delivery products such as F5, Nginx, A10, or NetScaler.
Experience with host-based micro-segmentation solutions such as ColorTokens or Illumio.
Experience leading cross-functional teams across various technologies and environments.
Experience with DoD enterprise networks, including defense infrastructure, DMZ, and application security.
Secret clearance.
High school diploma or GED.

Nice To Haves

Experience with Palo Alto Next-Generation Firewalls and Panorama.
Experience with F5 BIG-IP Application Security Manager (ASM) and Advanced Web Application Firewall (AWAF).
Experience securing enterprise web applications to comply with OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
Experience with Infrastructure-as-Code (IaC) tools, including Terraform, and deploying IaC with VS Code.
Knowledge of Azure Cloud and AWS Cloud environments.
Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5 and 6.

Responsibilities

Implement and integrate information systems, including routing and switching technologies.
Develop enterprise-wide infrastructure.
Troubleshoot and resolve complex network issues.
Analyze existing infrastructure and improve the security, reliability, and availability of mission-critical network systems.
Optimize client operations and modernization using knowledge of network protocols, equipment, emerging technologies, and configurations.
Lead cross-functional teams across various technologies and environments.