Junior Application Security Engineer: SAST/DAST & CI/CD

Bloomberg Industry Group; Arlington (VA); On-site; USD 90,000 - 110,000; Full time

Job summary

Bloomberg Industry Group is seeking an Application Security Engineer I to join our security team and help secure our applications across the product lifecycle. You will work with developers to embed secure coding practices and support security in our CI/CD pipelines.

Responsibilities include conducting SAST, DAST, SCA, and penetration testing, assisting in vulnerability management, and collaborating with engineers to design and review security features while staying current on emerging threats

Qualifications

• Basic knowledge of security principles, standards, and best practices.
• Familiarity with one or more programming languages (e.g., Python, Java, JavaScript).
• Ambition to learn and grow into AI Security and Security Engineering.
• Exposure to security testing tools like SAST, DAST, SCA, and/or vulnerability management platforms.
• An associate's degree in Information Security, Computer Science, or a related field, or equivalent experience.
• 1-2 years of relevant experience.

Responsibilities

• Conduct SAST/DAST/SCA, and penetration testing to identify vulnerabilities.
• Assist in vulnerability management processes and incident response support.
• Collaborate with engineers to design, implement, and review security features in applications.
• Contribute to development and automation of security tooling and scripts.
• Stay current on emerging security trends and tooling.

Skills

Security basics

Programming familiarity

AI security interest

Security testing tools

Vulnerability mgmt

Education

Associate degree in IT security

Tools

GitLab

GitHub Actions

Jenkins

AWS

Job description

Bloomberg Industry Group is seeking an Application Security Engineer I to join our security team and help secure our applications across the product lifecycle. You will work with developers to embed secure coding practices and support security in our CI/CD pipelines.

Responsibilities include conducting SAST, DAST, SCA, and penetration testing, assisting in vulnerability management, and collaborating with engineers to design and review security features while staying current on emerging threats