Application Security Engineer (R-00233)
True Zero Technologies1 month ago
Ashburn, VA, USASenior
Responsibilities
- Lead the administration, configuration, maintenance, tuning, and security of CBP application systems throughout the software lifecycle.
- Create and maintain application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
- Support ISSOs during ATO and ATT activities by producing and maintaining application security documentation and evidence.
- Perform weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
- Maintain continuous application monitoring, critical-incident alerting, operational status reporting, and service-request tracking.
- Apply configuration management and change-control procedures to application baselines, configuration items, engineering changes, and deployment records.
- Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.
Requirements
- At least 7 years of relevant application security or security engineering experience.
- Demonstrated ability to lead application security operations, lifecycle management, configuration control, logging, monitoring, and vulnerability-remediation efforts.
- Advanced experience supporting ATO or ATT activities, security impact assessments, product evaluations, change approvals, and operational risk decisions.
- Strong written and oral communication skills for technical recommendations, procedures, status reporting, and coordination with ISSOs and Government leads.
Benefits
- Competitive salary paid twice per month.
- Best-in-class medical coverage with 100% of medical premiums covered by True Zero.
- Company-wide new business incentive programs and contribution incentives for white papers, blog posts, internal webinars, and similar work.
- Three weeks of PTO starting and 11 paid holidays annually.
- 401(k) program with a 100% company match on the first 4%.
- Monthly reimbursement of cell phone and home internet costs.
- Paternity and maternity leave.
- Investment in training and certifications.
Categories
About True Zero Technologies
True Zero Technologies provides cybersecurity consulting and managed security services to public- and private-sector organizations, including federal, defense, and SLED customers. Its offerings span SOC operations, incident response, security engineering and architecture, SIEM migration, endpoint security, and Zero Trust design and implementation. Founded in 2016 and headquartered in Fairfax, Virginia, the privately held, veteran-owned firm delivers both project-based engagements and ongoing managed services.