Application Security Engineer

Responsibilities

• Collaborate with clients, application owners, development teams, and application security teams to identify, prioritize, and remediate application security vulnerabilities.
• Lead security discussions and provide guidance on secure development practices, security requirements, and application security best practices.
• Perform SAST, DAST, threat modeling, and application-level security assessments using tools such as Veracode and Burp Suite DAST.
• Apply OWASP frameworks, standards, and best practices to identify risks and strengthen application security.
• Design and implement enterprise-wide security controls and help development teams implement remediation strategies.
• Stay current with emerging application security threats and vulnerabilities.

Requirements

• 6+ years of experience in information technology, cybersecurity, or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST to perform DAST.
• 3+ years of experience designing and implementing enterprise-wide security controls for applications, systems, networks, or infrastructure services.
• 3+ years of experience with Linux or UNIX environments, including system navigation and basic website connectivity troubleshooting.
• 2+ years of experience with Veracode and development environments such as Eclipse and JDeveloper, including pipeline development and integration.
• Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• High school diploma or GED.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
• Preferred experience with Interactive Application Security Testing (IAST) capabilities and tools.

Benefits

• Hybrid work arrangement with expected work at a Booz Allen or customer facility according to leadership expectations and role needs.
• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards program and access to Booz Allen employee benefit programs for eligible employees.