Application Security Engineer
CACI International12 days ago
O'Fallon, IL, USAMid Level / Senior
H1B sponsor
Base Salary
$75k - $158k/yr
Responsibilities
- Embed security practices into the secure software development lifecycle from design through deployment.
- Perform SAST using Fortify and continuous code quality and security analysis using SonarQube.
- Execute DAST and coordinate or conduct penetration-testing engagements.
- Conduct secure code reviews, document findings, and provide actionable remediation guidance.
- Track and verify vulnerability remediation through closure.
- Validate application security controls against program and DoD requirements.
- Author application security assessment and penetration-test reports.
- Support the Cybersecurity Architect with secure SDLC process design.
Requirements
- Active Secret or TS clearance is required.
- 3–5 years of experience in application security, secure development, or penetration testing is required.
- Hands-on experience with SAST platforms, preferably Fortify, is required.
- Working knowledge of the OWASP Top 10 and common application vulnerability classes is required.
- Demonstrated experience conducting or supporting penetration tests is required.
- DoD 8140.03M DCWF Basic Tier CEH or an applicable DoD 8140 interim education option is required.
- A DoD 8140.03M DCWF Intermediate Tier credential such as CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+ is desired.
- A bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, IT, or Software Engineering is desired.
- Experience with SonarQube or similar secure code analysis platforms is desired.
- Familiarity with DevSecOps pipelines and CI/CD security integration is desired.
- Scripting or development experience in Python, Java, or similar languages is desired.
Benefits
- Flexible time off, healthcare, wellness, financial, retirement, family support, continuing education, and other time-off benefits are offered.
- Learning and development resources and opportunities are provided.
- Full-time regular employment with up to 10% local travel is required.
- Quarterly travel to Scott Air Force Base is required.
About CACI International
CACI International is a public government contractor that delivers enterprise IT, cybersecurity, electronic warfare, space, and intelligence solutions to U.S. defense, intelligence, and federal civilian customers. It provides systems engineering, software and data services, and mission support across C4ISR and business systems, primarily through long-term government contracts. Founded in 1962 and headquartered in Reston, Virginia, CACI trades on the NYSE under the ticker CACI.