Application Security Engineer

Booz Allen Hamilton • Annapolis Junction, MD

69d • $77,600 - $176,000

About The Position

As an Application Security engineer, you're eager to build, manage, and secure applications from ideation to post-launch. We need you to design and implement effective security solutions to solve some of our clients' toughest challenges. As a lead application security engineer at Booz Allen, you can use your technical skills to affect mission-forward change. You'll guide your team as they use the latest software development, cloud, and security technologies to improve your client's environment. You'll guide clients and your team on implementing Application Security tools, practicing DevSecOps, and ensuring that code and applications are secure. Using your platform expertise, you'll lead your team as you inform strategy and design while ensuring standards are met throughout the software development life cycle. You'll recommend resources that will help your client manage and securely adopt best practices. Additionally, you'll continue to strengthen your DevSecOps skills while supporting the development of critical applications and products.

Requirements

• 5+ years of experience in the development of software, tools, and processes to drive DevSecOps maturity.
• 2+ years of experience securing products, applications, or hardware against reverse engineering attacks.
• Experience troubleshooting, triaging, and resolving vulnerabilities in code and CI/CD pipelines.
• Experience developing enterprise cloud-native solutions.
• Experience with mentoring or supervising employees within a collaborative team environment.
• Knowledge of integrated development environments (IDEs) and version control.
• Ability to perform independent research to learn and apply concepts and technologies.
• Ability to create and present information at executive-level meetings.
• Ability to travel up to 20% of the time.
• Bachelor's degree and 4+ years of experience in DevSecOps or 8+ years of experience in DevSecOps in lieu of a degree.

Nice To Haves

• Experience designing and implementing logging strategies for security data.
• Experience developing enterprise cloud-native solutions involving Kubernetes, Docker, AWS, Jenkins, or Azure.
• Experience deploying SAST or DAST tools.
• Experience with remediation of critical code vulnerabilities.
• Experience with creating and improving continuous automation across multiple technical stacks.
• Experience with Infrastructure as Code, including AWS CloudFormation, Azure ARM, or Terraform.
• Experience triaging and resolving issues related to both open source and commercial tools in public cloud environments.
• Knowledge of scripting languages such as Python, Linux Shell Script.
• Master's degree.

Responsibilities

• Design and implement effective security solutions for applications.
• Guide the team in using software development, cloud, and security technologies.
• Implement Application Security tools and practice DevSecOps.
• Ensure code and applications are secure throughout the software development life cycle.
• Recommend resources for managing and securely adopting best practices.
• Support the development of critical applications and products.

Benefits

• Health, life, and disability insurance.
• Financial and retirement benefits.
• Paid leave and professional development.
• Tuition assistance and work-life programs.
• Dependent care support.
• Recognition awards program for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees