Senior Application Security Engineer

ASM Research, An Accenture Federal Services Company; Juneau (AK); On-site; USD 110,000 - 189,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, evaluates application security in all phases of the software development life cycle, working with teams to enforce best practices and remediate vulnerabilities across diverse applications and languages.

Responsibilities include vulnerability assessments, penetration testing, and developer training on Secure Code Development, with ongoing collaboration with Web, network, and security teams to drive project security enhancements.

Qualifications

• Bachelor’s degree in computer science, engineering, or related technical field or equivalent experience.
• 5–10 years of experience in Application Security roles (Developer/Analyst).
• Strong knowledge of security concepts, OWASP Top 10, authentication/authorization (RBAC).
• Proficient with security tooling and code reviews across languages and platforms.

Responsibilities

• Evaluates application security through all SDLC phases.
• Defines, maintains, and enforces app security best practices.
• Performs vulnerability assessments and penetration tests.
• Trains developers on Secure Code Development and security protocols.
• Liaises with development and stakeholders to capture security requirements.
• Identifies and remediates vulnerabilities across applications.

Skills

Application security

Vulnerability assessment

Penetration testing

Secure coding practices

Unix/Linux knowledge

GIT source control

Agile/Scrum

RBAC authorization

OWASP Top 10

JavaScript/NodeJS scripting

Education

Bachelor’s Degree in Computer Science/Engineering or equivalent

Tools

HP Fortify

BurpSuite

Git / GIT

NodeJS

Vagrant

Chef

Rake

Gradle

Jenkins

Hibernate

Spring Framework

Spring Security

Job description

ASM Research, An Accenture Federal Services Company, evaluates application security in all phases of the software development life cycle, working with teams to enforce best practices and remediate vulnerabilities across diverse applications and languages.

Responsibilities include vulnerability assessments, penetration testing, and developer training on Secure Code Development, with ongoing collaboration with Web, network, and security teams to drive project security enhancements.