Remote App Security Engineer - SAST/DAST & OWASP

Polarits; Delaware; On-site; USD 120,000 - 180,000; Full time

Job summary

Booz Allen Hamilton seeks an experienced Application Security Engineer for a 100% remote role supporting government clients. The position requires hands-on expertise with SAST/DAST, Veracode, Burp Suite, and enterprise security controls to protect applications and data.

The role involves staying current with OWASP Top 10 and security standards, plus coordinating with security teams to implement robust controls.

Qualifications

• 6+ years of Information Technology experience.
• 3+ years supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE plug‑in environments using Veracode and Burp Suite.
• 2+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience designing and implementing enterprise‑wide security controls to secure applications, systems, networks, or infrastructure services.
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio.
• Experience securing enterprise web applications and knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS‑25.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website‑connectivity issues.
• HS diploma or GED.

Job description

Booz Allen Hamilton seeks an experienced Application Security Engineer for a 100% remote role supporting government clients. The position requires hands-on expertise with SAST/DAST, Veracode, Burp Suite, and enterprise security controls to protect applications and data.

The role involves staying current with OWASP Top 10 and security standards, plus coordinating with security teams to implement robust controls.