Senior Application Security Engineer - Remote DAST/SAST Expert

MBL Technologies, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Performance bonuses

401K

PTO

Remote work

Health and wellness programs

Employee discounts

Learning and development reimbursement

Job summary

MBL Technologies, Inc. is seeking a Senior Application Security Engineer to support application security testing and vulnerability management for a federal government customer.

The role involves performing DAST with Burp Suite Enterprise, SAST with Veracode, and collaborating with development teams to remediate vulnerabilities. The ideal candidate has 6+ years in IT/cybersecurity, hands-on experience with Linux environments, and strong knowledge of OWASP Top 10, NIST 800-53, and FedRAMP.

Qualifications

• 6+ years of experience in IT/cybersecurity or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST for testing.
• 2+ years of experience performing SAST with Veracode or similar tools.
• 3+ years designing and implementing enterprise security controls.
• 3+ years supporting Linux/UNIX environments.
• 2+ years with Veracode integration and development environments.
• Experience securing enterprise web apps and frameworks.
• Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
• Knowledge of NIST 800-53, FIPS, and FedRAMP.
• Ability to obtain/maintain Public Trust or Suitability.
• High School Diploma or GED.

Responsibilities

• Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
• Conduct Static Application Security Testing (SAST) using Veracode.
• Identify, analyze, document, and validate application vulnerabilities.
• Support secure SDLC initiatives.
• Collaborate with development teams to remediate findings.
• Support enterprise-wide app security and vulnerability management programs.
• Assist with app security assessments of web apps, APIs, and supporting infra.
• Develop security reports, findings, risk assessments, and executive summaries.
• Support continuous monitoring and compliance initiatives.
• Contribute to secure app architecture reviews and security design consultations.

Skills

Information security

Application security

Java

Python

C# / .NET

Burp Suite

Linux

Veracode

NIST 800-53

OWASP Top 10

Education

Bachelor's degree in Cybersecurity

Tools

Burp Suite Enterprise

Veracode

Job description

MBL Technologies, Inc. is seeking a Senior Application Security Engineer to support application security testing and vulnerability management for a federal government customer.

The role involves performing DAST with Burp Suite Enterprise, SAST with Veracode, and collaborating with development teams to remediate vulnerabilities. The ideal candidate has 6+ years in IT/cybersecurity, hands-on experience with Linux environments, and strong knowledge of OWASP Top 10, NIST 800-53, and FedRAMP.