Lead Application Security Engineer

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton is seeking an Application Security Engineer to collaborate with clients and development teams to maintain a resilient security posture for mission-critical applications.

You will perform SAST, DAST, threat modeling, and security assessments using Veracode and Burp Suite, applying OWASP and NIST standards to identify and remediate risks.

The role requires 6+ years in IT/security, 3+ years in Java/Python/.NET/C#, and related tools and environments, with a HS diploma or GED.

Qualifications

• Extensive experience in information technology and cybersecurity or application security.
• Proficient in Java, Python, .NET, or C# with secure coding practices.
• Experience with Burp Suite DAST for security testing.
• Design and implement enterprise-wide security controls for applications and infrastructure.
• Strong Linux/UNIX navigation and troubleshooting skills.
• Experience with Veracode and IDEs like Eclipse or JDeveloper and CI/CD pipelines.
• Familiarity with OWASP Top 10 and security frameworks.
• Knowledge of NIST 800-53, FIPS, FedRAMP.
• Eligibility for Public Trust or Suitability/Fitness determination.
• HS diploma or GED.

Responsibilities

• Collaborate with clients and development teams to maintain a resilient security posture.
• Lead security discussions and provide guidance on secure development practices.
• Perform SAST, DAST, threat modeling, and security assessments.
• Apply OWASP standards and emerging threats to mitigate risks.

Skills

6+ years IT/security

Java/Python/.NET/C#

Burp Suite DAST

Security controls design

Linux/UNIX

Veracode & IDEs

OWASP & security frameworks

NIST/FedRAMP knowledge

Public Trust readiness

HS diploma

Education

HS diploma or GED

Tools

Burp Suite

Veracode

Eclipse

JDeveloper

Job description

Booz Allen Hamilton is seeking an Application Security Engineer to collaborate with clients and development teams to maintain a resilient security posture for mission-critical applications.

You will perform SAST, DAST, threat modeling, and security assessments using Veracode and Burp Suite, applying OWASP and NIST standards to identify and remediate risks.

The role requires 6+ years in IT/security, 3+ years in Java/Python/.NET/C#, and related tools and environments, with a HS diploma or GED.