Senior Application Security Engineer - Remote

6d6 days ago

Agile Defense

Remote · Full-time · $160,000 – $210,000

About this role

At Agile Defense, action defines the outcome and new challenges require new solutions. We embrace change with an unmovable spirit and courage to build for what comes next. Our vision brings adaptive innovation to support nation's most important missions through advanced technologies, elite minds, and unparalleled agility.

Serve as Senior Application Security Engineer maintaining a resilient security posture for highly visible applications. Work together with the client and application community in a remote capacity. Collaborate to remediate application security flaws in conjunction with the application security team.

Lead security discussions with application teams to prescribe security best practices within their development lifecycle. Perform dynamic and static application security testing using tools like Burp Suite and SD Elements. Conduct threat modeling and application-level testing while working with the latest OWASP frameworks.

Operate in Linux-based environments supporting federal compliance standards like NIST 800-53 and FedRAMP. Employees are our number one priority with a culture that values you as a family member. Accomplish great things together leveraging speed, flexibility, and ingenuity to protect nation's vital interests.

Requirements

IT related Bachelor's Degree
6+ years of Information Technology experience
3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Burp Suite
Burp Enterprise experience performing DAST scanning and Veracode experience performing SAST scanning
Knowledge of Linux environment and coding/scripting experience
Must be a U.S. citizen able to obtain Public Trust clearance
2+ years of experience with Java, Python, .NET, or C#
3+ years of experience using the design and implementation of enterprise-wide security controls

Responsibilities

Work together with the client and application community to maintain a resilient security posture for highly visible applications
Remediate application security flaws in conjunction with the application security team
Lead security discussions with the application teams to prescribe security best practices within their development lifecycle
Perform dynamic and static application security testing
Perform security requirements creation or threat modeling leveraging tools including SD Elements
Perform application-level testing using applications such as Burp Suite
Work with the latest OWASP frameworks