Application Security Engineer

Unisys; Rockville (MD); On-site; USD 100,000 - 130,000; Full time

Job summary

A leading company in IT Services is seeking a Senior Application Security Engineer to enhance application security throughout the software development lifecycle. The role includes performing security assessments, integrating security practices into CI/CD pipelines, and leveraging the latest technologies. Ideal candidates will have a strong background in cybersecurity, experience with various security tools, and a Bachelor's degree in a related field.

Qualifications

• 5+ years in cybersecurity and application security.
• Familiarity with SAST, DAST, IAST tools.

Responsibilities

• Perform security assessments and manual penetration testing.
• Integrate security practices into CI/CD pipelines.
• Evaluate and recommend new security products and technologies.

Skills

Pentest

OWASP

SAST

DAST

IAST

AWS

GenAI

Education

Bachelor's degree in computer science

Tools

Burp Suite

Jenkins

GITLAB

Job description

Job Title: Senior Application Security Engineer

Get AI-powered advice on this job and access more exclusive features.

Direct message the job poster from Unisys.

Key Skills and Bonuses: Pentest, OWASP, SAST/DAST/IAST. Bonus: LLM, US citizenship preferred, AWS, GenAI, certifications like GWAPT or Portswigger Academy.

Must Have:

• OWASP

Role Overview: The senior application security engineer plans, coordinates, and implements application security throughout the software development lifecycle, including testing, remediation, and tool evaluation. The role involves assessing vulnerabilities, implementing security solutions, and leveraging the latest technologies to enhance code review capabilities.

Responsibilities:

• Perform security assessments and manual penetration testing using tools such as Burp Suite and other proxy tools.
• Triage static (SAST), dynamic (DAST), interactive (IAST) analysis results to identify, prioritize, and remediate security vulnerabilities.
• Integrate security practices into CI/CD pipelines to support DevSecOps initiatives.
• Maintain documentation of security findings, remediation plans, and compliance requirements.
• Develop and interpret security policies and procedures; participate in security compliance efforts.
• Develop and deliver training materials and perform security awareness sessions.
• Evaluate and recommend new security products and technologies.
• Leverage GenAI technologies to scale application security reviews and automate code analysis.
• Evaluate various application security tools such as SAST, DAST, IaC, and secrets detection tools.
• Stay current with emerging security threats and countermeasures.
• Train or explain common security issues to developers and assurance engineers.
• Perform AWS configuration reviews.

Qualifications:

• Bachelor's degree in computer science, engineering, or related field.
• 5+ years in cybersecurity and application security.
• Familiarity with SAST, DAST, IAST tools.
• Understanding of AWS and OWASP top issues.
• Experience with CI/CD tools like Jenkins and GITLAB.
• Familiarity with GenAI tools is a plus.
• Strong technical knowledge in security engineering, cryptography, and application security.
• Security certifications such as GWAPT, OSWE, or Burp Suite Certified Practitioner are advantageous.

Additional Details:

• Seniority Level: Mid-Senior level
• Employment Type: Full-time
• Job Function: Information Technology
• Industries: IT Services and IT Consulting