Application Security Engineer - SDLC & Container Security

Leidos Inc; Ashburn (VA); On-site; USD 107,900 - 195,050; Full time

Job summary

Leidos Inc in Ashburn, VA is seeking an Application Security Engineer to monitor, assess, and harden CBP security tool suite; responsibilities include integrating security into SDLC, applying SAST/DAST tools, and collaborating with development teams.

The role requires a TS/SCI clearance, 8-12 years of experience, and experience with Kubernetes, CI/CD, and logging. This is an on-site position at Ashburn, VA with competitive pay and benefits.

Qualifications

• BS degree in Information Technology, Software Engineering, or related field and 8 - 12 years of prior relevant experience
• 3+ years of prior experience in application security with a focus on SAST, SCA, DAST
• Knowledge of secure coding practices and integration into SDLC
• Familiarity with common security frameworks and standards
• Strong programming/scripting skills
• Excellent communication and collaboration skills
• Working in an Agile project management environment
• Must have a Top Secret Clearance with SCI
• Must be able to report into the Ashburn VA office up to 5 days per week.

Responsibilities

• Ensure continuous monitoring of all CSD managed applications and implement an alerting system for critical incidents
• Participate in market research to identify new security solutions as required to avoid obsolescence and to improve the overall security posture
• Develop, deploy, maintain, and/or assist in the implementation and integration of ML/AI into CBP's security tool suite
• Integrate security best practices into the SDLC and ensure security is embedded from design to deployment
• Utilize SAST tools to analyze source code for vulnerabilities
• Work closely with development teams and ISSOs to remediate identified security issues
• Conduct security assessments using Microfocus WebInspect and other DAST tools
• Collaborate with development teams to address and remediate dynamic security findings
• Implement and manage container security tools, with a focus on Anchore
• Provide recommendations for secure container orchestration
• Work on ensuring systems and applications comply with STIGs
• Establish and maintain the definitive current basis for control and status accounting of application systems
• Select configuration items at appropriate levels for documentation and control
• Tune logging capabilities for efficiency and identify shortfalls and improvements
• Support the CSD Service Desk in managing and executing the Vulnerability Identification and Remediation process

Skills

Programming/Scripting

Secure coding practices

Agile / project management

Communication skills

Collaboration

Education

BS in Information Technology or Software Engineering

Master's degree (preferred)

Tools

Kubernetes/Rancher

Cloudera

Salt/Ansible

Elasticsearch

Gitlab / CI-CD tools

Job description

Leidos Inc in Ashburn, VA is seeking an Application Security Engineer to monitor, assess, and harden CBP security tool suite; responsibilities include integrating security into SDLC, applying SAST/DAST tools, and collaborating with development teams.

The role requires a TS/SCI clearance, 8-12 years of experience, and experience with Kubernetes, CI/CD, and logging. This is an on-site position at Ashburn, VA with competitive pay and benefits.