Application Security Engineer: SDLC & SAST Defender

Booz Allen Hamilton; McLean (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in McLean, VA is seeking an Application Security Analyst to safeguard internal and client-facing applications. You will manage vulnerabilities, leverage SAST, and perform web app scanning to identify weaknesses, enabling secure coding practices across teams.

As part of Enterprise Cybersecurity, you will collaborate with developers to embed security into the SDLC, stay current on threats, and deliver metrics to leadership. U.S. citizenship is required.

Qualifications

• 4+ years in application security, including vulnerability assessment and remediation.
• Experience with SAST, secret scanning, and open-source library vulnerability scanning tools.
• Knowledge of secure coding practices and common application vulnerabilities, including OWASP Top 10.
• Knowledge of software development lifecycle (SDLC) and DevSecOps principles.
• Ability to communicate effectively with clients, supporting teams, and management.
• Ability to triage and prioritize vulnerabilities based on risk and business impact.

Responsibilities

• Identify and remediate code-level vulnerabilities using SAST.
• Perform web application scanning to detect weaknesses in internal and client-facing apps.
• Collaborate with development teams to integrate security into the SDLC and promote secure coding practices.
• Stay current with emerging application security threats and collaborate with Cyber Fusion Center teams.
• Provide metrics and KPIs to operational teams and senior leadership as needed.

Skills

Vulnerability assessment

SAST tools

Secure coding practices

SDLC / DevSecOps

Communication

Risk prioritization

Education

Associate's degree with IT experience

Bachelor's degree in CS/Cybersecurity

Master's degree with IT experience

10+ years of experience in lieu of a degree

Tools

SAST tools

Secret scanning

OSS dependency scanning

CI/CD tooling

Job description

Booz Allen Hamilton in McLean, VA is seeking an Application Security Analyst to safeguard internal and client-facing applications. You will manage vulnerabilities, leverage SAST, and perform web app scanning to identify weaknesses, enabling secure coding practices across teams.

As part of Enterprise Cybersecurity, you will collaborate with developers to embed security into the SDLC, stay current on threats, and deliver metrics to leadership. U.S. citizenship is required.