Senior Application Security Engineer responsible for engineering and optimizing integrated systems that enhance enterprise-wide digital transformation initiatives through advanced security testing, vulnerability assessment, and compliance controls.
What you'll do
- Perform and optimize DAST scanning using Burp Enterprise to identify and validate application vulnerabilities at scale
- Conduct SAST scanning with Burp Professional and Veracode across IDE plug-in environments to detect code-level security flaws
- Design and implement enterprise-wide security controls to secure applications, systems, network, and infrastructure services
- Evaluate and recommend new security technologies and system architectures to enhance organizational security posture
- Ensure enterprise web applications comply with OWASP Top 10, CVSS, CWE, WASC, and SANS-25 standards
- Support federal compliance requirements including NIST 800-53, FIPS, and FedRAMP certifications
- Troubleshoot and optimize security scanning pipelines and tool integrations across Linux-based environments
Mission
This role supports federal government digital transformation initiatives requiring adherence to federal compliance standards such as NIST 800-53, FIPS, and FedRAMP. The position is with Agile Defense, a defense contractor focused on bringing adaptive innovation to support the nation's critical missions through advanced technologies and security capabilities.
Required skills
- Burp Enterprise (DAST scanning)
- Burp Professional (SAST scanning)
- Veracode (SAST scanning and IDE plug-ins)
- Linux environment administration
- Java, Python, .NET, or C#
- Enterprise security controls design and implementation
- OWASP Top 10, CVSS, CWE, WASC, SANS-25
- NIST 800-53, FIPS, or FedRAMP compliance
- Eclipse, JDeveloper, or Visual Studio
- Enterprise web application security