Application Security Engineer

Polar IT Services • Elkridge, DE

6d • Remote

About The Position

This role is for an Application Security Engineer with Booz Allen Hamilton, supporting the SEC as a government agency. The position is 100% remote with a contract duration of 12+ months. The interview process involves two video calls, and onboarding requires obtaining SEC Public Trust clearance, which takes 3-4 weeks. The primary focus areas for this role are Burp and Veracode.

Requirements

• 6+ years of Information Technology experience
• 3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite
• 2+ years of experience with Java, Python, .NET, or C#
• 3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or services
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio
• Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website connectivity issues
• HS diploma or GED

Nice To Haves

• Experience with Interactive Application Security Testing (IAST) capabilities and tools
• Experience with HackerOne
• Experience with Selenium
• Experience writing bash scripts
• Experience with OWASP ZAP or Burp Proxy

Responsibilities

• Supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
• Designing and implementing enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
• Securing enterprise web applications and understanding OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Navigating and troubleshooting basic website connectivity issues in Linux or UNIX environments.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED