Senior Application Security Engineer

MBL Technologies, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Performance bonuses

401K

PTO

Remote work

Health and wellness programs

Employee discounts

Learning and development reimbursement

Job summary

MBL Technologies, Inc. is seeking a Senior Application Security Engineer to support application security testing and vulnerability management for a federal government customer.

The role involves performing DAST with Burp Suite Enterprise, SAST with Veracode, and collaborating with development teams to remediate vulnerabilities. The ideal candidate has 6+ years in IT/cybersecurity, hands-on experience with Linux environments, and strong knowledge of OWASP Top 10, NIST 800-53, and FedRAMP.

Qualifications

• 6+ years of experience in IT/cybersecurity or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST for testing.
• 2+ years of experience performing SAST with Veracode or similar tools.
• 3+ years designing and implementing enterprise security controls.
• 3+ years supporting Linux/UNIX environments.
• 2+ years with Veracode integration and development environments.
• Experience securing enterprise web apps and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain/maintain Public Trust or Suitability.
• High School Diploma or GED.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) using Veracode.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure SDLC initiatives.
• Collaborate with development teams to remediate findings.
• Support enterprise-wide app security and vulnerability management programs.
• Assist with app security assessments of web apps, APIs, and supporting infra.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure app architecture reviews and security design consultations.

Skills

Information security

Application security

Java

Python

C# / .NET

Burp Suite

Linux

Veracode

NIST 800-53

OWASP Top 10

Education

Bachelor's degree in Cybersecurity

Tools

Burp Suite Enterprise

Veracode

Job description

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

Why Work with Us?

• Make an Impact: Work on meaningful projects that support critical missions and drive innovation.
• Invest in Your Future: Competitive benefits, 401(k) match, and professional development opportunities.
• Be Part of Something Bigger: Join a collaborative team that values community engagement, volunteerism, and employee connection.

MBL Technologies is seeking an experienced Senior Application Security Engineer to support application security testing and vulnerability management efforts for a federal government customer. The successful candidate will perform application security assessments, execute Dynamic Application Security Testing (DAST), conduct Static Application Security Testing (SAST), and collaborate with development teams to identify and remediate security vulnerabilities.

The ideal candidate will possess extensive experience with Burp Enterprise for DAST scanning, Veracode for SAST analysis, Linux environments, and secure software development practices. This role plays a critical part in protecting enterprise applications and ensuring compliance with federal cybersecurity requirements.

This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.

Key Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) utilizing Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work closely with development teams to recommend remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with application security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.

Required Experience Skills & Qualifications

• 6+ years of experience with Information Technology, including cybersecurity or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST capabilities to perform Dynamic Application Security Testing.
• 2+ years of experience performing SAST using Veracode or comparable tools.
• 3+ years of experience designing and implementing enterprise-wide security controls.
• 3+ years of experience supporting Linux or UNIX environments.
• 2+ years of experience with Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Preferred Qualifications

• Experience with Interactive Application Security Testing (IAST) tools and methodologies.
• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes)

170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

CORPORATE CITIZEN

MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits

MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.

EEO STATEMENT

MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.