> Markdown version of [/jobs/ext/1646362-application-security-engineer-lead](https://www.wearedevelopers.com/jobs/ext/1646362-application-security-engineer-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer, Lead - **Company:** Booz Allen Hamilton Inc. - **Location:** Colorado Springs, CO, United States - **Experience:** Expert - **Salary:** $99,000.0 - $225,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Application Firewall, Microsoft Azure, Complex Networks, Information Systems, Federal Information Processing Standards (FIPS), Routing, Network Segmentation, Network Protocols, Nginx, Open Web Application Security, Software Deployment, Systems Integration, Web Applications, Computer Networking Systems, Software Security, Firewalls (Computer Science), Juniper, SC Clearance, Infrastructure Automation Frameworks, Terraform, Cisco, Citrix Netscaler - **Published:** July 15, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9033108/application-security-engineer-lead ## About the Role A well-designed network is critical to move data and enable finan cia l institutions to achieve their missions, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and sof tware, requires a combination of technical skill and careful planning. That's why we need you, an experienced network engineer who knows how to develop the exact network finan cia l institutions need. As a Lead Application Security Engineer on our team, you'll use your experience with implementing and integrating information systems, including routing and switching technologies. You'll develop enterprise-wide infrastructure, troubleshoot and resolve complex network issues, analyze working infrastructures, and increase security, reliability, and availability for mission-critical network systems. Your knowledge of network protocols, equipment, emerging technology, and configurations will come in handy as you optimize client operations and modernization. Using your technical curiosity and knowledge of industry standards, you'll make an impact on national security missions., * 5+ years of experience implementing application security services such as macro-segmentation, micro-segmentation, application-aware firewalls, and Web Application Firewalls ( WAF ) * 5+ years of experience with next-generation firewalls, such as Palo Alto, or Cisco, or Fortninet, or Juniper, or Illumio * 5+ years of experience with application delivery products, such as F5, Nginx, A10, or NetScaler * Experience leading cross-functional teams across various technologies and environments * Experience with DoD enterprise networks, such as defense infrastructure, including DMZ and application security * Secret clearance * HS diploma or GED * Experience with Palo Alto Next-Generation Firewalls and Panorama * Experience with F5 BIG-IP Application Security Manager ( ASM ) and Advanced Web Application Firewall ( AWAF ) * Experience securing enterprise web applications to be compliant with OWASP Top 10, CVSS, CWE, WASC, and SANS-25 * Experience working with Infrastructure-as-Code ( IaC ) tools, including Terraform and deploying IaC with VS Code * Knowledge of Azure Cloud and AWS Cloud environments * Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5 / 6 ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)