Application Security Engineer

Tooling Power BI Scripting Operations Automation ServiceNow Burp Suite Azure DevOps Communication Secure Coding Cyber Security .NET Framework Microsoft Azure Threat Modeling Computer Science Security Testing Security Controls Technical Support CompTIA Security+ Business Valuation Penetration Testing Application Security Information Technology Full Stack Development Business Transformation Dynamic Program Analysis Java (Programming Language) Python (Programming Language) Security Requirements Analysis Systems Development Life Cycle Software Development Life Cycle Systems Security Certified Practitioner Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Open Web Application Security Project (OWASP) Certified Information Systems Security Professional, To support the integration of security into the software development lifecycle, the Application Security Engineer will collaborate with development and infrastructure teams to help remediate vulnerabilities, assess application risks, and help maintain a secure posture of the applications. This role is ideal for someone with hands-on experience in application security who is looking to grow their technical depth and experience.

Responsibilities:

Collaborate with development teams to promote secure coding practices and assist in identifying and mitigating security vulnerabilities.

Contribute to the implementation of Secure SDLC standards, including security requirements for application design and development.

Assist in integrating application security tools such as SAST, DAST, and SCA into CI/CD pipelines.

Review security testing results and support remediation efforts for identified vulnerabilities.

Help implement security controls for applications deployed in both on-premises and cloud environments.

Participate in threat modeling and security design reviews under the guidance of senior engineers.

Support training efforts and knowledge sharing on secure development practices within engineering teams.

Stay current with emerging security threats, vulnerabilities, and industry best practices., Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools. Related Jobs Cybersecurity Engineer SME Leidos

Bethesda, MD*On-Site

Linux CI/CD Splunk Nessus Rapid7 Ansible Auditing Firewall Equities Scripting SonarQube DevSecOps Pipelines Operations Automation Purchasing Upskilling Market Data Coordinating Oracle Cloud Cryptography Investigation Cyber Security Key Management Risk Management Authentications Cloud Computing Ancient History Network Security Security Controls Incident Response CompTIA Security+ Digital Forensics System Monitoring Endpoint Security Cyber Engineering Analytical Method Windows PowerShell AWS CloudFormation Systems Engineering Amazon Web Services Time Off Management Security Engineering Software Development Contingency Planning Signals Intelligence Programming Languages Regulatory Frameworks Vulnerability Scanning Security Configuration, Splunk Gitlab Github Ansible Auditing Firewall Equities Scripting DevSecOps Pipelines Operations Leadership Management Automation Mentorship Purchasing Upskilling

Bachelors Degree in Information Technology, Computer Science, or related field, or equivalent experience.

35 years of experience in cybersecurity or application security roles.

Familiarity with security frameworks and standards such as OWASP Top 10, NIST,.

Experience with at least one programming language (e.g., Java, Python, .Net) and scripting.

Understanding of secure architecture principles for web and cloud-based applications.

Exposure to security testing tools and techniques (e.g., static/dynamic analysis, Pen Testing).

Strong communication and collaboration skills.

Desired:

Security certifications such as SSCP, Security+, or working toward CISSP or similar.

Experience in using ServiceNow platform.

Knowledge and experience in Azure cloud and Azure DevOps.

Knowledge and experience of PowerBI platform.

Skills

Security, Information security, Application support, SAST, DAST, azure devops, Python

Top Skills Details

Security,Information security,Application support,SAST,DAST,azure devops,Python

Additional Skills & Qualifications

Req qual call with Kiran

Mid Level Application Security Engineer

DevSecOps Experience 3+ years experience

• how to Automate Tooling

• What Devsec Ops does

Hands on programming experience

• Developer in the past preferably .Net/Python but open to Java

• At minimum atleast able to read and make minor code changes

Azure Platform Experience DEVOPS

SAST & DAST Code scanning experience

• IMF uses HCL App Scan for SAST

• Burpsuite for DAST

Power BI user experience

• ability to create reports

ServiceNow (User Level Ticketing experience)

First 2 months of role will be looking at Vulnerabilities and following up with Technical team

• Power BI Creating reports (Vulnerabilities by Division or by applications or Critical High to Low

• Creating tickets in ServiceNow

• Python

• Automating Data, Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors., Cyber Security Policies Configuration Management Vulnerability Management Certified Ethical Hacker Cyber Security Standards Cybersecurity Compliance Risk Management Framework Authorization (Computing) Cyber Threat Intelligence Cyber Security Assessment IT Security Documentation Agile Software Development Splunk Enterprise Security Google Cloud Platform (GCP) Computer Network Operations Change Management Processes Information Systems Security Customer Information Systems React.js (Javascript Library) Python (Programming Language) Enterprise Application Software Endpoint Detection And Response Troubleshooting (Problem Solving) Host Based Security System (HBSS) Intrusion Detection And Prevention CompTIA Cybersecurity Analyst (CySA+) Plan Of Action And Milestones (POA&M) Security Information And Event Management (SIEM) Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), Hardening Visionary SonarQube DevSecOps Operations Leadership Innovation Mitigation Encryption Coordinating Fuzz Testing Communication Collaboration Cyber Security Prioritization Cloud Security Security Tools Attack Vectors Access Controls Threat Modeling Software Systems Security Controls Amazon CloudWatch Industry Standards Penetration Testing Amazon Web Services Information Privacy Continuous Delivery Continuous Integration Effective Communication Vulnerability Management Risk Management Framework Authorization (Computing) Engineering Design Process Information Systems Security Security Requirements Analysis Continuous Improvement Process Plan Of Action And Milestones (POA&M) Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) CompTIA Advanced Security Practitioner (CASP+) Certified Information Systems Security Professional Enterprise Mission Assurance Support Service (eMASS), Market Data Cyberattack Coordinating Cryptography Player Coach Proxy Servers Cyber Security Key Management Security Tools Attack Vectors Detail Oriented Problem Solving Cloud Computing Ancient History Database Systems Network Security Security Controls Incident Response Digital Forensics Endpoint Security Cyber Engineering Analytical Method Windows PowerShell AWS CloudFormation Medical Monitoring Amazon Web Services Time Off Management Security Engineering Technical Leadership Data Loss Prevention Signals Intelligence Programming Languages Technical Engineering Vulnerability Scanning Text Retrieval Systems Education and Training Red Hat Enterprise Linux Cyber Threat Intelligence Agile Software Development Computer Network Operations Change Management Processes Customer Information Systems React.js (Javascript Library) Python (Programming Language) Virtual Private Networks (VPN) Enterprise Application Software Troubleshooting (Problem Solving) Host Based Security System (HBSS) Security Information And Event Management (SIEM)

We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That’s the power of true partnership. TEKsystems is an Allegis Group company., Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.