Senior Application Security Engineer - Secure SDLC & Cloud

Booz Allen Hamilton; Maryland; On-site; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability benefits

Retirement plans

Tuition assistance

Professional development

Work-life programs

Dependent care

Job summary

Booz Allen Hamilton seeks an experienced Application Security Engineer to strengthen our cybersecurity program across the software development lifecycle. You will mentor teams, lead architecture reviews, and translate technical risks into strategic roadmaps for executive stakeholders.

The role emphasizes Secure SDLC, software supply chain security, and collaboration with clients to build mission-ready security solutions. Strong communication and leadership are essential.

Qualifications

• 5+ years of experience in cybersecurity, application security, product security, or software engineering.
• Experience implementing or assessing Secure SDLC and application security programs.
• Experience with software supply chain security concepts (SBOMs, dependency management, code signing).
• Experience with security testing tools (SAST, DAST, SCA, IaC scanning) and DevSecOps practices.

Responsibilities

• Translate complex technical risks into executive-level briefings and roadmaps.
• Lead client engagements and architecture reviews.
• Mentor junior team members and contribute to practice development.
• Apply security practices across the software development lifecycle.

Skills

Cybersecurity

Application security

Product security

Software engineering

Secure SDLC

Threat modeling

Security assessments

Executive communication

Education

Bachelor's degree in CS, Cybersecurity, Information Systems, or Engineering

Master's degree in Cybersecurity or related field

Job description

Booz Allen Hamilton seeks an experienced Application Security Engineer to strengthen our cybersecurity program across the software development lifecycle. You will mentor teams, lead architecture reviews, and translate technical risks into strategic roadmaps for executive stakeholders.

The role emphasizes Secure SDLC, software supply chain security, and collaboration with clients to build mission-ready security solutions. Strong communication and leadership are essential.