Remote AppSec Analyst — Secure SDLC & Remediation

Remote Jobs; McLean (VA); Hybride; USD 87 000 - 198 000; Plein temps

Résumé du poste

Booz Allen's Enterprise Cybersecurity team is seeking an Application Security Analyst to manage vulnerabilities across internal and client-facing applications. You will leverage SAST, secret scanning, and open-source scanners, and collaborate with developers to integrate security into the software development lifecycle (SDLC).

As part of a Cyber Fusion Center environment, you will help promote secure coding practices, triage risks, and provide metrics to leadership. U.S.

Qualifications

• 4+ years of experience in application security, including vulnerability assessment and remediation.
• Experience with SAST, secret scanning, and open-source dependency scanning tools.
• Knowledge of OWASP Top 10 and secure coding practices.
• Familiarity with SDLC and DevSecOps principles.
• Strong communication with clients, supporting teams, and management.
• Ability to triage vulnerabilities by risk and business impact.
• Education or experience equivalence as listed (as per degree options).

Responsabilités

• Manage application security vulnerabilities and remediation.
• Use SAST tools to identify and remediate code-level vulnerabilities.
• Conduct web application scanning to detect security weaknesses.
• Collaborate with development teams to integrate security into the SDLC.
• Promote secure coding practices.
• Assist with metrics and KPIs for leadership.
• Direct outreach to development teams to ensure rapid remediation.

Connaissances

Application security

Vulnerability assessment

SAST

DevSecOps

Communication

Risk prioritization

Formation

Associate's degree

Bachelor's degree

Master's degree

Experience in lieu of degree

Outils

SAST tools

Secret scanning tools

Open-source scanner tools

Description du poste

Booz Allen's Enterprise Cybersecurity team is seeking an Application Security Analyst to manage vulnerabilities across internal and client-facing applications. You will leverage SAST, secret scanning, and open-source scanners, and collaborate with developers to integrate security into the software development lifecycle (SDLC).

As part of a Cyber Fusion Center environment, you will help promote secure coding practices, triage risks, and provide metrics to leadership. U.S.