Application Security Engineer

Disruptive Solutions, LLC; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Disruptive Solutions, LLC is seeking a senior IT security professional with 6+ years in cybersecurity or application security. Strong coding skills in Java, Python, .NET, or C#, and expertise in security testing and compliance are required.

Responsibilities include performing DAST with Burp Suite, implementing enterprise-wide security controls, and securing web applications in Linux/UNIX environments. Knowledge of NIST 800-53, FIPS, and FedRAMP is essential, with eligibility to obtain Public

Qualifications

• 6+ years of experience in Information Technology with a focus on cybersecurity or application security.
• 3+ years of Java, Python, .NET, or C# experience.
• 3+ years using Burp Suite DAST for Dynamic Application Security Testing.
• 3+ years designing and implementing enterprise-wide security controls.
• 3+ years Linux/UNIX environments experience.
• 2+ years Veracode and IDEs (Eclipse, JDeveloper) exposure.
• Experience with OWASP Top 10, CVSS, CWE, WASC, SANS-25.
• Knowledge of NIST 800-53, FIPS, or FedRAMP.
• Ability to obtain Public Trust or Suitability/Fitness determination.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite for enterprise applications.
• Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
• Secure enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Work in Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues.
• Develop and integrate security pipelines using Veracode and development environments such as Eclipse, JDeveloper.
• Maintain knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.

Skills

Cybersecurity

Java

Python

C#

.NET

Security testing

Linux

OWASP Top 10

NIST 800-53

FIPS

FedRAMP

Security pipelines

IAST

Education

HS Diploma or GED

Tools

Burp Suite

Veracode

Eclipse

JDeveloper

Job description

Clearance Requirement: Ability to obtain and maintain a Public Trust
Employment Type:Full time

About Company

Not specified

Job Summary

The position requires over 6 years of IT experience with a focus on cybersecurity or application security, proficiency in Java, Python, .NET, or C#, and expertise in security testing and compliance standards.

Key Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite for enterprise applications.
  
• Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
  
• Secure enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
  
• Work in Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues.
  
• Develop and integrate security pipelines using Veracode and development environments such as Eclipse, JDeveloper.
  
• Maintain knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.
  

Required Qualifications

• 6+ years of experience with Information Technology, with experience in cybersecurity or application security.
  
• 3+ years of experience with Java, Python, .NET, or C#.
  
• 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST).
  
• 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
  
• 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues.
  
• 2+ years of experience with Veracode and development environments such as Eclipse, JDeveloper, including pipeline development and integration.
  
• Experience with securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
  
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.
  
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
  
• HS diploma or GED.
  

Preferred Qualifications

• Experience with Interactive Application Security Testing (IAST) capabilities and tools.
  

Equal Opportunity Statement

Disruptive Solutions, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other characteristic protected by law.

Salary Range

The salary range listed for this position represents a general guideline and is not a guarantee of compensation. Disruptive Solutions considers several factors when determining an offer, including the position’s responsibilities, federal contract labor category and applicable contract rates, work location, relevant experience, education, certifications, specialized skills, internal equity, market conditions, and other business considerations. The final salary will be determined following a comprehensive review of the candidate’s qualifications and alignment with the role.