Senior Application Security Engineer

MBL Technologies • Washington, DC

3d

About The Position

MBL Technologies, Inc. is seeking an experienced Senior Application Security Engineer to support application security testing and vulnerability management for a federal government customer. The role performs application security assessments, Dynamic Application Security Testing (DAST), and Static Application Security Testing (SAST), and works with development teams to identify and remediate vulnerabilities. The position supports enterprise applications and federal cybersecurity compliance requirements. It requires the ability to obtain and maintain a Public Trust or Suitability/Fitness determination.

The successful candidate will bring experience with Burp Suite Enterprise, Veracode, Linux environments, and secure software development practices. The role also supports secure software development lifecycle initiatives, enterprise-wide vulnerability management, continuous monitoring, compliance, and secure application architecture reviews.

Requirements

• At least 6 years of Information Technology experience, including cybersecurity or application security.
• At least 3 years of experience with Java, Python, .NET, or C#.
• At least 3 years of experience using Burp Suite DAST capabilities to perform Dynamic Application Security Testing.
• At least 2 years of experience performing SAST using Veracode or comparable tools.
• At least 3 years of experience designing and implementing enterprise-wide security controls.
• At least 3 years of experience supporting Linux or UNIX environments.
• At least 2 years of experience with Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High school diploma or GED.

Nice To Haves

• Experience with Interactive Application Security Testing (IAST) tools and methodologies.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Listed military occupational specialty codes: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) using Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work with development teams to recommend vulnerability remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.
• Support internal corporate initiatives and contribute to a stable business platform.

Benefits

• Competitive salary adjusted for candidate qualifications.
• Incentive plans with corporate- and individual-based performance bonuses.
• 401(k).
• Paid time off (PTO).
• Remote work.
• Health and wellness programs.
• Employee discounts.
• Learning and development reimbursement.
• Professional development opportunities.
• Community engagement, volunteerism, and employee connection.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED