Senior Application Security Engineer

MBL Technologies • Washington, DC

4d

About The Position

MBL Technologies, Inc. is seeking an experienced Senior Application Security Engineer to support application security testing and vulnerability management for a federal government customer. The role performs application security assessments, Dynamic Application Security Testing (DAST), and Static Application Security Testing (SAST), and collaborates with development teams to identify and remediate security vulnerabilities. It requires experience with Burp Enterprise, Veracode, Linux environments, and secure software development practices. The position supports protection of enterprise applications and compliance with federal cybersecurity requirements. The successful candidate must be able to obtain and maintain a Public Trust.

Requirements

• At least 6 years of Information Technology experience, including cybersecurity or application security.
• At least 3 years of experience with Java, Python, .NET, or C#.
• At least 3 years of experience using Burp Suite DAST capabilities to perform Dynamic Application Security Testing.
• At least 2 years of experience performing SAST using Veracode or comparable tools.
• At least 3 years of experience designing and implementing enterprise-wide security controls.
• At least 3 years of experience supporting Linux or UNIX environments.
• At least 2 years of experience with Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Nice To Haves

• Experience with Interactive Application Security Testing (IAST) tools and methodologies.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Military Occupational Specialty codes listed in the posting: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, and 9891.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) using Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work with development teams to recommend vulnerability remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with application security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.
• Support internal corporate initiatives and contribute to company success as a good corporate citizen.

Benefits

• Competitive salary adjusted for candidate qualifications
• Incentive plans with corporate- and individual-based performance bonuses
• 401(k)
• Paid time off (PTO)
• Remote work
• Health and wellness programs
• Employee discounts
• Learning and development reimbursement
• Professional development opportunities
• Competitive benefits
• 401(k) match

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED