Application Security Engineer
CACI International12 days ago
O'Fallon, IL, USAMid Level / Senior
H1B sponsor
Base Salary
$75k - $158k/yr
Responsibilities
- Embed security practices into the secure SDLC from design through deployment.
- Perform SAST with Fortify and continuous code quality and security analysis with SonarQube.
- Execute DAST and coordinate or conduct penetration testing engagements.
- Conduct secure code reviews, document findings, and provide actionable remediation guidance.
- Track and verify vulnerability remediation through closure.
- Validate application security controls against program and DoD requirements.
- Author application security assessment and penetration test reports.
- Support secure SDLC process design with the Cybersecurity Architect.
Requirements
- Active Secret or TS clearance is required.
- 3–5 years of experience in application security, secure development, or penetration testing is required.
- Hands-on experience with SAST platforms, preferably Fortify, is required.
- Working knowledge of OWASP Top 10 and common application vulnerability classes is required.
- Demonstrated experience conducting or supporting penetration tests is required.
- DoD 8140.03M DCWF Basic Tier CEH qualification is required.
- DoD 8140 Interim Education Options apply.
- Preferred qualifications include DoD 8140.03M DCWF Intermediate Tier certification, a bachelor's degree in a relevant field, SonarQube experience, DevSecOps pipeline familiarity, and scripting or development experience in Python, Java, or similar languages.
Benefits
- Full-time regular employment with healthcare, wellness, financial, retirement, family support, continuing education, and time-off benefits.
- Flexible time off and access to learning and development resources.
- Required quarterly travel to Scott Air Force Base; up to 10% local travel.
- Minimum Secret clearance is required to start.
- Proposed annual salary range of $75,200–$158,100.
About CACI International
CACI International is a public government contractor that delivers enterprise IT, cybersecurity, electronic warfare, space, and intelligence solutions to U.S. defense, intelligence, and federal civilian customers. It provides systems engineering, software and data services, and mission support across C4ISR and business systems, primarily through long-term government contracts. Founded in 1962 and headquartered in Reston, Virginia, CACI trades on the NYSE under the ticker CACI.