Application Security Engineer — SDLC & DevSecOps Advocate

Booz Allen Hamilton; Bethesda (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Application Security Engineer to embed security across the software development lifecycle, mentor teammates, and guide client engagements with advanced security expertise. You will lead architecture reviews, threat modeling, and security assessments to strengthen client programs and improve risk posture.

The role requires strong knowledge of secure SDLC, cloud-native architectures, and modern security frameworks, with a focus on delivering practical security

Qualifications

• Bachelor's or higher in a CS-related field and cybersecurity background.
• Extensive experience leading application security programs and client engagements.
• Proven ability to translate complex risks into executive briefings and roadmaps.

Responsibilities

• Integrate security practices across the software development lifecycle.
• Lead architecture reviews, threat modeling, and security assessments for clients.
• Mentor junior team members and contribute to practice development.

Skills

Secure SDLC

Threat modeling

DevSecOps

Agile/Scrum

Cloud security

API security

Vulnerability management

Executive communications

Mentoring

Education

Bachelor's degree in CS/Cybersecurity/Information Systems/Engineering

Master's degree in Cybersecurity/CS/Software Engineering/Information Assurance

Tools

SAST

DAST

SCA

IaC scanning

Container security

APIs security

Secrets detection

NIST/ISO security frameworks

Kubernetes

Job description

Booz Allen Hamilton is seeking an Application Security Engineer to embed security across the software development lifecycle, mentor teammates, and guide client engagements with advanced security expertise. You will lead architecture reviews, threat modeling, and security assessments to strengthen client programs and improve risk posture.

The role requires strong knowledge of secure SDLC, cloud-native architectures, and modern security frameworks, with a focus on delivering practical security