Application Security Engineer (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Application Security Engineer (Cybersecurity): Strengthening secure software for DoD planning and decision-support missions with an accent on SAST/DAST and vulnerability remediation. Focus on integrating security testing into CI/CD workflows and ensuring software supply-chain security.
Location: Remote, U.S. with periodic onsite work in Laurel, Maryland, approximately every six weeks
Company
delivers mission-critical secure software and support across defense, civilian, and public-sector environments.
What you will do
- Conduct and support static and dynamic application-security testing (SAST/DAST).
- Use automated security scanning tools like Fortify, X-Ray, and OWASP ZAP to identify actionable vulnerabilities.
- Collaborate with software and AI/ML engineers to analyze root causes and verify remediation of security risks.
- Integrate security testing into secure CI/CD and Git-based development workflows.
- Strengthen software supply-chain security throughout the development and delivery process.
- Ensure software meets all functional and security requirements before final release.
Requirements
- Active final DoD Secret clearance required.
- Must be based in the U.S.
- At least six years of experience in cyber resilience, SAST, DAST, and vulnerability remediation.
- Bachelor’s degree in Cybersecurity.
- Hands-on experience evaluating and resolving application-security vulnerabilities.
- Strong ability to communicate technical security findings to developers and stakeholders.
Nice to have
- Experience with OpenShift, Kubernetes, or other containerized application environments.
- Proficiency with GitLab and Artifactory for development and artifact management.
- Experience supporting classified, defense, or other highly regulated software environments.
Culture & Benefits
- 401(k) with 100% company match up to 6%.
- Comprehensive medical, dental, vision, life, and disability coverage.
- Remote-work support and home-office equipment plan.
- Company-supported certifications aligned with program work.
- Paid time off, company holidays, and weekly pay schedule.
- Fitness and wellness reimbursement.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →