Remote Application Security Engineer - SDLC Security Leader

Phase2 Technology; Bethesda (MD); Hybrid; USD 9,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Application Security Engineer to embed security across the software development lifecycle, lead client engagements, and mentor junior staff. The role requires translating technical risk into business cases and guiding security architectures in cloud-native environments.

Ideal candidates have 5+ years in cybersecurity or application security, with experience in secure SDLC, SBOMs, and modern tooling (SAST/DAST/SCA).

Qualifications

• 5+ years of experience in cybersecurity, application security, product security, or software engineering.
• Experience implementing Secure SDLC and application security programs, leading client engagements, and performing architecture reviews, threat modeling, or security assessments.
• Experience with software supply chain security concepts (SBOMs, dependency management, code signing, artifact integrity, secure build pipelines).
• Experience implementing or evaluating application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and software composition analysis.
• Experience with Agile, Scrum, and DevSecOps in large-scale software development environments.
• Knowledge of secure software development principles and cloud-native architectures (Kubernetes, containers, APIs, serverless).

Responsibilities

• Integrate security practices throughout the software development lifecycle.
• Apply advanced consulting skills and provide executive-level briefings and roadmaps.
• Mentor and supervise team members during client engagements.
• Translate complex technical risks into business cases for executives.
• Lead reviews and assessments of security architectures and controls.

Skills

Cybersecurity

Application security

Threat modeling

Architecture reviews

Security assessments

Education

Bachelor’s degree in CS/Cybersecurity/Information Systems/Engineering

Master’s degree in Cybersecurity/CS/Software Engineering/Information Assurance

Tools

SAST

DAST

SCA

IaC scanning

Container security

Job description

Booz Allen Hamilton is seeking an Application Security Engineer to embed security across the software development lifecycle, lead client engagements, and mentor junior staff. The role requires translating technical risk into business cases and guiding security architectures in cloud-native environments.

Ideal candidates have 5+ years in cybersecurity or application security, with experience in secure SDLC, SBOMs, and modern tooling (SAST/DAST/SCA).