Senior AppSec Engineer: Secure SDLC & Cloud

DGS Office of External Affairs; Olympia (WA); On-site; USD 120,000 - 180,000; Full time

Job summary

The DGS Office of External Affairs seeks a Senior Application Security Analyst to protect Washington Health Benefit Exchange applications and data by embedding security controls across the software development lifecycle in cloud and on-premises environments.

You will collaborate with delivery teams, DevOps, architects, and IT to advance secure software development practices, perform security assessments, and drive continuous improvement of the application's security posture.

Qualifications

• Seven years of information security experience in specialized roles such as security architecture, penetration testing, or application security
• Demonstrated knowledge of secure SDLC, secure architecture design, and cloud architecture including DevSecOps practices
• Experience performing application security code reviews and risk assessments using automated and manual techniques
• Experience with common vulnerability assessment tools such as Nessus, Rapid7, Burp Suite, SAST, DAST, and SCA tools
• Strong analytical and problem-solving skills with experience integrating security in CI/CD pipelines and infrastructure-as-code
• Strong interpersonal and collaboration skills working with cross-functional teams and external partners

Responsibilities

• Vulnerability management
• Threat modeling
• Code reviews
• Penetration testing
• Provide guidance to development teams on remediation and secure coding standards

Skills

Security architecture

Penetration testing

Application security

CI/CD security

DevSecOps

Threat modeling

Vulnerability assessment

Cross-functional collaboration

Tools

Nessus

Rapid7

Burp Suite

SAST

DAST

SCA tools

Job description

The DGS Office of External Affairs seeks a Senior Application Security Analyst to protect Washington Health Benefit Exchange applications and data by embedding security controls across the software development lifecycle in cloud and on-premises environments.

You will collaborate with delivery teams, DevOps, architects, and IT to advance secure software development practices, perform security assessments, and drive continuous improvement of the application's security posture.