Apply on Employer Site

Booz Allen Hamilton · 20 hours ago

Application Security Engineer

Washington, DC

Full-time

Hybrid

Mid, Senior Level

$62K/yr - $141K/yr

6+ years exp

Booz Allen Hamilton is a consulting firm focused on providing innovative solutions to clients. They are seeking an Application Security Engineer to maintain a resilient security posture for applications, lead security discussions, and perform various application security testing and modeling.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

U.S. Citizen Only

Responsibilities

Work together with the client and application community to maintain a resilient security posture for highly visible applications

Remediate application security flaws in conjunction with the application security team

Lead security discussions with the application teams to prescribe security best practices within their development lifecycle

Perform dynamic and static application performance testing, perform security requirements creation or generation-level threat modeling leveraging tools, including SD Elements, and perform application-level testing using applications such as Burp Suite

Work with the latest OWASP frameworks

Qualification

JavaPythonBurp SuiteOWASP frameworksStatic Application Security TestingDynamic Application Security TestingEnterprise security controlsNIST 800-53LinuxSoft skills

Required

6+ years of experience with Information Technology

3+ years of experience with Java, Python, .NET, or C#

3+ years of experience with Burp Suite supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments

3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, networks, or infrastructure services

Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio

Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25

Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP

Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website connectivity issues

Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

HS diploma or GED