Application Security Engineer

Summary: The Application Security Engineer role is focused on enhancing application security through the use of tools like Burp and Veracode. The position requires extensive experience in various security testing methodologies and programming languages. The role is fully remote and is expected to last for over 12 months. Candidates must possess a strong background in IT security and compliance standards.

Key Responsibilities:

• Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
• Implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
• Secure enterprise web applications and ensure compliance with OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Navigate and troubleshoot basic website connectivity issues in Linux or UNIX environments.
• Utilize Interactive Application Security Testing (IAST) capabilities and tools.

Key Skills:

• 6+ years of Information Technology experience.
• 3+ years of experience with Veracode and Burp Suite.
• 2+ years of experience with Java, Python, .NET, or C#.
• Experience with Eclipse, JDeveloper, or Visual Studio.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• Experience with HackerOne, Selenium, and writing bash scripts.
• Experience with OWASP ZAP or Burp Proxy.

Salary (Rate): undetermined

City: undetermined

Country: USA

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT