Application Security Engineer
Booz Allen Hamilton6 hours ago
Base Salary
$62k - $141k/yr
Responsibilities
- Collaborate with clients, application owners, development teams, and application security teams to identify, prioritize, and remediate application security vulnerabilities.
- Lead security discussions and provide guidance on secure development practices, security requirements, and application security best practices.
- Perform SAST, DAST, threat modeling, and application-level security assessments using tools such as Veracode and Burp Suite DAST.
- Apply OWASP frameworks, standards, and best practices to identify risks and strengthen application security.
- Design and implement enterprise-wide security controls and help development teams implement remediation strategies.
- Stay current with emerging application security threats and vulnerabilities.
Requirements
- 6+ years of experience in information technology, cybersecurity, or application security.
- 3+ years of experience with Java, Python, .NET, or C#.
- 3+ years of experience using Burp Suite DAST to perform DAST.
- 3+ years of experience designing and implementing enterprise-wide security controls for applications, systems, networks, or infrastructure services.
- 3+ years of experience with Linux or UNIX environments, including system navigation and basic website connectivity troubleshooting.
- 2+ years of experience with Veracode and development environments such as Eclipse and JDeveloper, including pipeline development and integration.
- Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
- Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.
- High school diploma or GED.
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
- Preferred experience with Interactive Application Security Testing (IAST) capabilities and tools.
Benefits
- Hybrid work arrangement with expected work at a Booz Allen or customer facility according to leadership expectations and role needs.
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
- Recognition awards program and access to Booz Allen employee benefit programs for eligible employees.
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).