Offer summary

Qualifications:

6+ years of Information Technology experience, 3+ years of experience with Static and Dynamic Application Security Testing using Veracode, Proficiency in programming languages such as Java, Python, .NET, or C#, Knowledge of federal compliance standards like NIST 800-53 and experience with Linux or UNIX environments..

Key responsabilities:

Support the security of applications, systems, and networks for client projects

Implement enterprise-wide security controls to secure applications and infrastructure services

Utilize tools like Burp Suite and OWASP ZAP for application security testing

Collaborate with teams to ensure compliance with security standards and best practices.

Job description

Overview:

Application Security Engineer

Remote | US Based

US Citizenship - Clearable, Ability to obtain a Public Trust

Summary

Our client is an employee and Service-Disabled, Veteran-owned Small Business focused on providing niche technical services. They are a team of experienced cybersecurity professionals with a track record of success in the Federal, Commercial, and Academic workspaces. Additionally, our client designs, builds, operates, and secures scalable cloud and IT infrastructures to meet their customers’ near-term needs and fulfill their long-term requirements.

Responsibilities

Our client is looking for an Application Security Engineer to join their team! This is an exciting opportunity to use your experience and skills to make a significant contribution to the security of our client's project accounts by supporting their applications, systems, and networks.

Requirements

6+ years of Information Technology experience
3+ years of experience with supporting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode specifically is required
3+ years of experience with Java, Python, .NET, or C#
3+ years of experience with Burp Suite
3+ years of experience using the design and implementation of enterprise-wide security controls to secure applications, systems, network, or infrastructure services
Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio
Experience with securing enterprise web applications and OWASP Top 10, CVSS, CWE, WASC, and SANS-25
Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP
Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website connectivity issues
Experience with Interactive Application Security Testing (IAST) capabilities and tools
Experience with Selenium
Experience writing bash scripts
Experience with OWASP ZAP or Burp Proxy

Education/Certification Requirements

A High School Deploma or GED is required for this position

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; a Public Trust is required for this position once an offer is made. Please be aware that onboarding can take 4-6 weeks for this position.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

--------------

About Us

Northern Virginia-based Precision Solutions is an expert in staffing solutions for companies of any size that open the door to new opportunities and seek outstanding talent. We pride ourselves on being versatile enough to tailor our relationships to the needs of each individual client, being agile in the fast-paced marketplace, and being precise in meeting the needs of any company.

Equal Opportunity Employer Statement

Precision Solutions is an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

Required profile