Remote Senior Application Security Engineer (Burp DAST)

Phia LLC; Fairfax (VA); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Short Term Disability

Long Term Disability

401k Retirement Savings Plan with 401k

Paid Holidays

Paid Time Off (PTO)

Tuition and Professional Development

Job summary

phia LLC is seeking a mission-driven Senior Application Security Engineer to embed within a federal financial regulatory agency's security team. The role focuses on running an enterprise DAST program with Burp Suite and integrating scans into CI/CD pipelines in Linux environments.

You will map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25, while aligning work to NIST 800-53, FIPS, and FedRAMP. Remote within the U.S. with strong collaboration across teams.

Qualifications

• 6+ years IT experience with cybersecurity or application security.
• 3+ years with Java, Python, .NET, or C#.
• 3+ years using Burp Suite DAST for dynamic testing.
• 2+ years with Veracode SAST and pipeline integration.
• 3+ years designing enterprise-wide security controls.
• 3+ years Linux/UNIX environments.
• 2+ years Veracode with Eclipse or JDeveloper integration.

Responsibilities

• Run enterprise DAST using Burp Suite DAST/Enterprise, including authenticated scans across applications.
• Integrate scanning into CI/CD pipelines and development environments.
• Navigate Linux/UNIX and troubleshoot connectivity affecting scans.
• Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure.
• Map findings to OWASP Top 10, CVSS, CWE, WASC, SANS-25; align with NIST 800-53, FIPS, FedRAMP.

Skills

Burp Suite DAST

Veracode SAST

Java

Python

.NET/C#

Linux/UNIX

CI/CD pipelines

OWASP Top 10

NIST 800-53

FedRAMP

Education

Bachelor's Degree preferred

Tools

Burp Suite DAST/Enterprise

Veracode

Eclipse/JDeveloper

Pipeline integration tools

Job description

phia LLC is seeking a mission-driven Senior Application Security Engineer to embed within a federal financial regulatory agency's security team. The role focuses on running an enterprise DAST program with Burp Suite and integrating scans into CI/CD pipelines in Linux environments.

You will map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25, while aligning work to NIST 800-53, FIPS, and FedRAMP. Remote within the U.S. with strong collaboration across teams.