Senior Application Security Engineer

ASM Research, An Accenture Federal Services Company; Carson City (NV); On-site; USD 110,000 - 189,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks an experienced Application Security Developer to evaluate security in the full software development lifecycle. You will lead vulnerability assessments, coordinate remediation, and train developers on secure coding practices while collaborating with development, Web, and network teams to strengthen overall security posture.

The role requires 5–10 years in application security, deep knowledge of Java-related tech, and strong hands-on

Qualifications

• Bachelor’s Degree in Computer Science, Engineering, or related field.
• 5-10 years of experience in Application Security roles or equivalent.

Responsibilities

• Evaluate application security across all phases of the SDLC.
• Collaborate with Web development, network, and security teams to drive security improvements.
• Define, maintain and enforce application security best practices.
• Explain vulnerabilities to owners and provide mitigation recommendations.
• Coordinate vulnerability assessments and remediation activities.
• Perform penetration tests and code reviews, both manual and automated.
• Train developers on Secure Code Development and security protocols.

Skills

Spring Framework

Spring Security

Web Services

REST

Hibernate

OWASP Top10

RBAC

SAML

LDAP

XSS

SQL Injection

BurpSuite

GIT

Unix/Linux

Jenkins

Gradle

Vagrant

Chef

Rake

TCP/IP

Education

Bachelor’s Degree in Computer Science, Engineering, or related

Tools

HP Fortify

BurpSuite

Git

Jenkins

Gradle

Vagrant

Chef

Rake

Cache DB

Job description

ASM Research, An Accenture Federal Services Company, seeks an experienced Application Security Developer to evaluate security in the full software development lifecycle. You will lead vulnerability assessments, coordinate remediation, and train developers on secure coding practices while collaborating with development, Web, and network teams to strengthen overall security posture.

The role requires 5–10 years in application security, deep knowledge of Java-related tech, and strong hands-on