Senior App Security Engineer — Remote for Federal Projects

MBL Technologies; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401K match

Remote work

Professional development

Job summary

MBL Technologies is seeking an experienced Senior Application Security Engineer to support security testing and vulnerability management for a federal government customer. You will perform DAST using Burp Suite Enterprise and SAST with Veracode, collaborating with development teams to remediate vulnerabilities.

The ideal candidate has extensive Linux/UNIX experience, knowledge of OWASP Top 10 and federal standards (NIST 800-53, FIPS, FedRAMP), and can obtain a Public Trust.

Qualifications

• 6+ years IT experience including cybersecurity or application security.
• 3+ years Java, Python, .NET, or C# experience.
• 3+ years Burp Suite DAST experience.
• 2+ years Veracode SAST experience.
• 3+ years designing enterprise-wide security controls.
• 3+ years Linux/UNIX experience.
• 2+ years Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) utilizing Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work closely with development teams to recommend remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with application security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.

Skills

Cybersecurity

Application security

Security testing

Linux/UNIX

OWASP knowledge

Education

Bachelor's degree in Cybersecurity or related

High School Diploma or GED

Tools

Burp Suite Enterprise

Veracode

SAST tools

IAST tools

Job description

MBL Technologies is seeking an experienced Senior Application Security Engineer to support security testing and vulnerability management for a federal government customer. You will perform DAST using Burp Suite Enterprise and SAST with Veracode, collaborating with development teams to remediate vulnerabilities.

The ideal candidate has extensive Linux/UNIX experience, knowledge of OWASP Top 10 and federal standards (NIST 800-53, FIPS, FedRAMP), and can obtain a Public Trust.