Senior Application Security Engineer role focused on improving application security coverage for high-visibility systems.

Partner with the client and application community to maintain a resilient security posture for highly visible applications.

6+ years of information technology experience.
3+ years supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Burp Suite.
1+ year supporting SAST, DAST, and IDE Plug-in environments using Veracode.
2+ years experience with Java, Python, .NET, or C#.
3+ years designing and implementing enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
Experience with Eclipse, JDeveloper (including pipeline development), or Visual Studio.
Experience securing enterprise web applications and familiarity with OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
2+ years in Linux based environments, including navigating and troubleshooting basic website connectivity issues.
Ability to obtain a security clearance.
IT-related Bachelor’s Degree.
Experience with Interactive Application Security Testing (IAST) capabilities and tools.
Experience with HackerOne.
Experience with Selenium.
Experience writing bash scripts.
Experience with OWASP ZAP or Burp Proxy.

Robust benefits package (medical, dental, vision, STD, Accident, Life, Hospital Insurance, FSA, HSA, 401K match, professional development stipend, etc.)
Community Service and Employee Engagement events
Competitive salary adjusted for candidate qualifications
Incentive plans with corporate and individual-based performance bonuses
401K
PTO
Remote work
Health and wellness programs
Employee discounts
Learning and development reimbursement

Senior Application Security Engineer

Job Description