Remote Senior Burp Suite DAST Engineer (Federal)

phia, LLC; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life Insurance

Short Term Disability

Long Term Disability

401k Retirement Savings Plan with 100%

Paid Holidays

Paid Time Off (PTO)

Tuition and Professional Development

Job summary

phia LLC seeks a Senior Application Security Engineer (Burp Suite DAST) to run the enterprise DAST program and integrate scanning into CI/CD in a federal-friendly environment. You will work in Linux, implement security controls, and align with NIST/FedRAMP standards while supporting modern development pipelines.

The role requires 3+ years with Burp Suite DAST, 2+ years with Veracode SAST, and strong coding skills in Java or Python. This is a remote US position with standard working hours.

Qualifications

• 3+ years running Burp Suite DAST / Burp Enterprise scans in enterprise environments.
• 2+ years Static Application Security Testing (SAST) with Veracode or similar Tools.
• 3+ years with Java, Python, .NET or C# in enterprise settings.

Responsibilities

• Run Enterprise DAST: configure, schedule, and run dynamic scans including authenticated scans.
• Integrate scanning into CI/CD pipelines within development environments.
• Work in Linux environments and troubleshoot connectivity impacting scanning.
• Design and implement enterprise-wide security controls for applications and infra.
• Map findings to OWASP Top 10, CVSS, CWE, WASC, and align with NIST 800-53, FIPS, FedRAMP.

Skills

Burp Suite DAST

Linux

Java

Python

C#

CI/CD security integration

Education

Bachelor's degree preferred

High school diploma or GED

Tools

Veracode

Job description

phia LLC seeks a Senior Application Security Engineer (Burp Suite DAST) to run the enterprise DAST program and integrate scanning into CI/CD in a federal-friendly environment. You will work in Linux, implement security controls, and align with NIST/FedRAMP standards while supporting modern development pipelines.

The role requires 3+ years with Burp Suite DAST, 2+ years with Veracode SAST, and strong coding skills in Java or Python. This is a remote US position with standard working hours.