Application Security Engineer

Disruptive Solutions, LLC is an equal opportunity employer. The Application Security Engineer will perform application security testing, design enterprise-wide security controls, secure web applications, develop security pipelines, and maintain compliance with federal security standards.

Responsibilities:

• Perform Dynamic Application Security Testing (DAST) using Burp Suite for enterprise applications
• Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services
• Secure enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Work in Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues
• Develop and integrate security pipelines using Veracode and development environments such as Eclipse, JDeveloper
• Maintain knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP

Requirements:

• 6+ years of experience with Information Technology, with experience in cybersecurity or application security
• 3+ years of experience with Java, Python, .NET, or C#
• 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST)
• 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services
• 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues
• 2+ years of experience with Veracode and development environments such as Eclipse, JDeveloper, including pipeline development and integration
• Experience with securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• HS diploma or GED
• Experience with Interactive Application Security Testing (IAST) capabilities and tools