Senior Application Security Engineer

RiseMe; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

401K

PTO

Health & wellness programs

Learning & development reimbursement

Employee discounts

Incentive plans

Job summary

MBL Technologies is hiring a Senior Application Security Engineer to work with client teams to maintain a resilient security posture for highly visible applications. You will leverage SAST/DAST, Veracode, and IDE plug-in environments while aligning with OWASP Top 10 and federal standards.

The role requires 6+ years IT experience, 3+ years with SAST/DAST, and hands-on expertise across Java, Python, .NET, or C#.

Qualifications

• 6+ years of information technology experience.
• 3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Burp Suite.
• 1+ year of experience with supporting SAST/DAST and IDE plug-ins using Veracode.
• 2+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience with design and implementation of enterprise security controls for applications, systems, networks or infrastructure.
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio.
• Experience securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, SANS-25.
• Knowledge of federal compliance standards (NIST 800-53, FIPS, FedRAMP).
• 2+ years in Linux based environments; troubleshooting connectivity issues.
• Ability to obtain a security clearance.
• IT-related Bachelor's Degree

Responsibilities

• Maintain a resilient security posture for highly visible applications in collaboration with client and application community.
• Lead efforts with SAST/DAST and Veracode integration to strengthen security controls.
• Support enterprise web applications security and OWASP-related practices.

Skills

IT experience

SAST/DAST experience

Java / Python / .NET / C#

OWASP Top 10 knowledge

NIST 800-53 / FedRAMP knowledge

Linux environments

Education

Bachelor's Degree in IT

Tools

Burp Suite

Veracode

Eclipse/JDeveloper/Visual Studio

OWASP ZAP

Selenium

Bash scripting

HackerOne

Burp Proxy

Job description

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.

If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

Why Work with Us?

• We trust, empower, and believe in our employees to soar to their fullest potential!
• We offer a robust benefits package (medical, dental, vision, STD, Accident, Life, Hospital Insurance, FSA, HSA, 401K match, professional development stipend, etc.).
• We love to have fun and give back to the community. Community Service and Employee Engagement events are atop our calendar events!
• We genuinely like each other and champion everyone to achieve their own greatness!

MBL Technologies is currently hiring for Senior Application Security Engineer / Veracode to enhance our application security team. In this role, you will work together with the client and application community to maintain a resilient security posture for highly visible applications.

Required Experience/Skills

• 6 + years of information technology experience.
• 3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Burp Suite
• 1+ year of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode
• 2+ years of experience with Java, Python, .NET, or C#
• 3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio.
• Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• 2+ years of experience working in Linux based environments, including navigating and troubleshooting basic website connectivity issues
• Ability to obtain a security clearance.
• IT related Bachelor's Degree

Additional Requirements

• Experience with Interactive Application Security Testing (IAST) capabilities and tools.
• Experience with HackerOne
• Experience with Selenium.
• Experience in writing bash scripts.
• Experience with OWASP ZAP or Burp Proxy

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes)

170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

Corporate Citizen

MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits

• competitive salary adjusted for candidate qualifications
• incentive plans with corporate and individual-based performance bonuses
• 401K
• PTO
• remote work
• health and wellness programs
• employee discounts
• learning and development reimbursement

EEO Statement

MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.