Senior App Security Engineer: Secure SDLC & Cloud

Booz Allen Hamilton; Annapolis (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in Annapolis, MD is seeking an experienced Application Security Engineer to advance secure software development and mentor teams. You will apply advanced security expertise across SDLC, drive risk-based decisions, and design secure architectures for complex systems.

Ideal candidates bring 5+ years in cybersecurity or software engineering, hands-on experience with SAST/DAST/SCA tools, and a track record in DevSecOps and cloud-native environments.

Qualifications

• 5+ years of experience in cybersecurity, application security, product security, or software engineering.
• Experience implementing or assessing Secure SDLC and application security programs, leading client engagements, managing multiple priorities, and performing architecture reviews, threat modeling, or security assessments.
• Experience with software supply chain security concepts, including SBOMs, dependency management, code signing, artifact integrity, and secure build pipelines.
• Experience implementing or evaluating application security tools such as SAST, DAST, SCA, IaC scanning, container security, API security, secrets detection, and software composition analysis.
• Experience with Agile, Scrum, and DevSecOps operating models in large-scale software development environments.
• Knowledge of secure software development principles, modern application architectures, including cloud-native, microservices, APIs, containers, Kubernetes, and serverless environments.
• Knowledge of authentication, authorization, cryptography, API security, and cloud security.
• Knowledge of vulnerability management processes, risk prioritization methodologies, and remediation workflows.
• Ability to translate complex technical risks into executive-level briefings, business cases, and actionable roadmaps and communicate effectively with technical and executive stakeholders.
• Bachelor's degree in CS, Cybersecurity, Information Systems, or Engineering.

Responsibilities

• Translate complex technical risks into executive-level briefings and roadmaps.
• Lead architecture reviews, threat modeling, and security assessments.
• Mentor and supervise team members and drive security initiatives across projects.
• Collaborate with clients to implement Secure SDLC and DevSecOps practices.
• Develop innovative, mission-ready security solutions for software platforms.

Skills

Cybersecurity

Application security

Product security

Software engineering

Education

Bachelor's degree in CS, Cybersecurity, Information Systems, or Engineering

Tools

SAST

DAST

SCA

IaC scanning

Container security

API security

Secrets detection

Software composition analysis

Job description

Booz Allen Hamilton in Annapolis, MD is seeking an experienced Application Security Engineer to advance secure software development and mentor teams. You will apply advanced security expertise across SDLC, drive risk-based decisions, and design secure architectures for complex systems.

Ideal candidates bring 5+ years in cybersecurity or software engineering, hands-on experience with SAST/DAST/SCA tools, and a track record in DevSecOps and cloud-native environments.