Senior Application Security Engineer

MBL Technologies; Washington (District of Columbia); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401K match

Remote work

Professional development

Descripción de la vacante

MBL Technologies is seeking an experienced Senior Application Security Engineer to support security testing and vulnerability management for a federal government customer. You will perform DAST using Burp Suite Enterprise and SAST with Veracode, collaborating with development teams to remediate vulnerabilities.

The ideal candidate has extensive Linux/UNIX experience, knowledge of OWASP Top 10 and federal standards (NIST 800-53, FIPS, FedRAMP), and can obtain a Public Trust.

Formación

• 6+ years IT experience including cybersecurity or application security.
• 3+ years Java, Python, .NET, or C# experience.
• 3+ years Burp Suite DAST experience.
• 2+ years Veracode SAST experience.
• 3+ years designing enterprise-wide security controls.
• 3+ years Linux/UNIX experience.
• 2+ years Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Responsabilidades

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) utilizing Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work closely with development teams to recommend remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with application security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.

Conocimientos

Cybersecurity

Application security

Security testing

Linux/UNIX

OWASP knowledge

Educación

Bachelor's degree in Cybersecurity or related

High School Diploma or GED

Herramientas

Burp Suite Enterprise

Veracode

SAST tools

IAST tools

Descripción del empleo

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

Why Work with Us?

• Make an Impact: Work on meaningful projects that support critical missions and drive innovation.
• Invest in Your Future: Competitive benefits, 401(k) match, and professional development opportunities.
• Be Part of Something Bigger: Join a collaborative team that values community engagement, volunteerism, and employee connection.

MBL Technologies is seeking an experienced Senior Application Security Engineer to support application security testing and vulnerability management efforts for a federal government customer. The successful candidate will perform application security assessments, execute Dynamic Application Security Testing (DAST), conduct Static Application Security Testing (SAST), and collaborate with development teams to identify and remediate security vulnerabilities.

The ideal candidate will possess extensive experience with Burp Enterprise for DAST scanning, Veracode for SAST analysis, Linux environments, and secure software development practices. This role plays a critical part in protecting enterprise applications and ensuring compliance with federal cybersecurity requirements.

This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.

Key Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) utilizing Veracode and related security tools.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure software development lifecycle (SSDLC) initiatives.
• Work closely with development teams to recommend remediation strategies.
• Support enterprise-wide application security and vulnerability management programs.
• Assist with application security assessments of web applications, APIs, and supporting infrastructure.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure application architecture reviews and security design consultations.

Required Experience Skills & Qualifications

• 6+ years of experience with Information Technology, including cybersecurity or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST capabilities to perform Dynamic Application Security Testing.
• 2+ years of experience performing SAST using Veracode or comparable tools.
• 3+ years of experience designing and implementing enterprise-wide security controls.
• 3+ years of experience supporting Linux or UNIX environments.
• 2+ years of experience with Veracode integration and development environments.
• Experience securing enterprise web applications and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of federal security and compliance standards including NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Preferred Qualifications

• Experience with Interactive Application Security Testing (IAST) tools and methodologies.
• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes)

170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

CORPORATE CITIZEN

MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits

MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.

EEO STATEMENT

MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.