Application Security Engineer, Lead

As a Lead Application Security Engineer based in Colorado Springs, CO, you will oversee the implementation and integration of information systems, help develop enterprise infrastructure, and troubleshoot complex network challenges to improve security, reliability, and uptime of mission-critical networks. This role supports national security missions and modernization efforts.

Responsibilities

• Implement and integrate information systems with emphasis on routing and switching technologies
• Design and develop enterprise-wide infrastructure
• Diagnose and resolve complex network issues
• Assess current infrastructures to identify improvements
• Enhance security, reliability, and availability of mission-critical network systems
• Streamline client operations and modernization initiatives
• Support national security missions through modernization efforts

Requirements

• Minimum five years implementing application security services including macro-segmentation, micro-segmentation, application-aware firewalls, and web application firewalls (WAF)
• At least five years with next-generation firewalls from vendors such as Palo Alto, Cisco, Fortinet, Juniper, or Illumio
• At least five years of experience with application delivery products such as F5, Nginx, A10, or NetScaler
• Experience leading cross-functional teams across diverse technologies and environments
• Experience with DoD enterprise networks, including defense infrastructure, DMZ, and application security
• Secret clearance is required
• High school diploma or GED

Technologies

• Web Application Firewall (WAF)
• Palo Alto
• Cisco
• Fortinet
• Juniper
• Illumio
• F5
• Nginx
• A10
• NetScaler
• Panorama
• F5 BIG-IP ASM
• AWAF
• Terraform
• VS Code
• Azure Cloud
• AWS Cloud

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Nice If You Have

• Experience with Palo Alto Next-Generation Firewalls and Panorama
• Experience with F5 BIG-IP Application Security Manager (ASM) and Advanced Web Application Firewall (AWAF)
• Experience securing enterprise web applications to comply with OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Experience with Infrastructure-as-Code tools, including Terraform and deploying IaC with VS Code
• Knowledge of Azure Cloud and AWS Cloud environments
• Knowledge of federal compliance standards such as DoD STIG, NIST 800-53, FIPS, and DoD IL5/IL6

Clearance

Secret clearance is required. Applicants selected will be subjected to a security investigation to determine eligibility for access to classified information.

Compensation

The projected compensation range for this position is USD 99,000.00 to 225,000.00 annually. This range reflects typical pay for the role and is one component of Booz Allen's total compensation package. Booz Allen reserves the right to determine final compensation based on location, education, knowledge, skills, competencies, experience, contract considerations, and organizational requirements. This posting will close within 90 days from the posting date.

Identity Statement

As part of the hiring process, you will complete an identity verification process using advanced biometrics and artificial intelligence to confirm authenticity and prevent identity fraud. Interviews and assessments may require you to be on camera, and Booz Allen may take your photograph to verify identity.

Candidate AI Usage Policy

AI is part of Booz Allen operations, and the company emphasizes responsible use of AI tools. Use of artificial intelligence or other tools to assist with interview responses is prohibited unless explicit permission is provided.

Work Model

Onsite work is expected, with primary duties performed at a Booz Allen office or a client facility. Collaboration with colleagues and customers will be conducted as required by the role.

Commitment to Non-Discrimination

All qualified applicants will be considered for employment without regard to disability, protected veteran status, or any other status protected by applicable laws.