Application Security Engineer (Burp Suite DAST)

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is seeking a mission-driven Senior Application Security Engineer to act as a dedicated technical partner embedded within a federal financial regulatory agency’s application security team.

You will run the enterprise application security testing program - automated dynamic scanning with Burp Suite DAST (formerly Burp Suite Enterprise Edition) - integrate scanning into development pipelines, and work in Linux environments to keep scans healthy. This is a hands-on engineering seat for someone who has operated an enterprise Dynamic Application Security Testing (DAST) program, not only manual testing with Burp Suite Professional.

What You’ll Do

• Run Enterprise DAST: Configure, schedule, and run dynamic application security scans with Burp Suite DAST (Enterprise), including authenticated scans across the application portfolio.

• Integrate the Pipeline: Build and maintain scan integrations in development environments and CI/CD pipelines (e.g., Eclipse, JDeveloper, Veracode pipeline scanning).
• Work in Linux: Navigate Linux/UNIX systems and troubleshoot basic website connectivity issues that affect scanning.
• Design Security Controls: Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services.
• Apply the Standards: Map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25, and align work to NIST 800-53, FIPS, and FedRAMP., Leads a team managing ADA and PWFA accommodation claims, ensuring accurate, timely, compliant claim adjudication and strong customer service. Responsibilities include coaching employees, managing performance and workloads, reviewing claim files and calls, identifying process improvements, administering concurrent disability and leave claims, mitigating risk, and communicating operational updates. The role requires disability or absence management expertise, sound judgment, knowledge of applicable regulations, and effective stakeholder collaboration. Top Skills: Microsoft Office Suite OneImaging

Systems Administrator

An Hour Ago Remote USA 60K-75K Annually Mid level 60K-75K Annually Mid level Healthtech Administer the company’s SaaS, cloud, identity, endpoint, and security platforms. Manage access, SSO, MFA, SCIM, audit logging, vendor security, user lifecycle, device policies, and automation using scripts and APIs. Respond to security incidents, maintain compliance controls and runbooks, provide tier 1-2 IT support, manage hardware and assets, and document internal procedures. The role requires broad systems ownership across AWS, Google Workspace, Rippling, and numerous business applications. Top Skills: ActivecampaignAdobeAdvancedmdAircallAmazon Web Services (Aws)AnthropicAws CloudtrailAws GuarddutyAws IamAws Security HubBashBrazeDatabricksDatadogFigmaGoogle SecopsGoogle WorkspaceGreenhouseHipaaIntercomIntuneIso 27001JAMFKandjiLinearLinkedInLucidmacOSMdmMfaMongodb AtlasNordvpn TeamsNotionOpenai ApiPostmanPowershellPythonRest ApisRipplingSalesforceSAMLScimScribeSentrySoc 2SplunkSsoStytchTerraformTwilioVirtruWaystarWindowsZendeskZoom Liberty Mutual Insurance

Technical Claims Specialist, Workers Compensation

2 Hours Ago Remote or Hybrid 75K-140K Annually Senior level 75K-140K Annually Senior level Artificial Intelligence * Fintech * Insurance * Marketing Tech * Software * Analytics Investigates, evaluates, reserves, negotiates, and resolves complex, high-severity workers compensation claims. Determines coverage and compensability, manages litigation and settlement activities, identifies fraud and subrogation opportunities, analyzes claims data, maintains reserves, advises management, and trains less experienced staff. Top Skills: ExcelMicrosoft Powerpoint

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

• Enterprise DAST Practitioner: 3+ years running Burp Suite DAST / Burp Enterprise scans - not only Burp Suite Professional.
• Veracode SAST User: 2+ years of Static Application Security Testing (SAST) experience, including Veracode and its pipeline integration.
• Coder: 3+ years with Java, Python, .NET, or C#.
• Linux-Comfortable: 3+ years in Linux/UNIX, including troubleshooting connectivity.
• Controls Designer: You have designed enterprise-wide security controls.
• Federal-Aware: Familiar with NIST 800-53, FIPS, or FedRAMP., * 6+ years of Information Technology experience, with experience in cybersecurity or application security.
• 3+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST).
• 2+ years of experience with Static Application Security Testing (SAST), using tools such as Veracode.
• 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
• 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues.

• 2+ years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration.

• Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP.

Preferred Skills

• Experience with Interactive Application Security Testing (IAST) capabilities and tools.
• Burp Suite DAST experience is pivotal in this position (required)

Required Education + Clearance

• Education: High school diploma or GED required; Bachelor’s Degree preferred (Experience can be substituted for education).
• Clearance: Public Trust / Suitability; applicants selected will be subject to a security investigation.

Run and maintain an enterprise Burp Suite DAST program, including authenticated scans, CI/CD integrations, and Linux troubleshooting. Use Veracode SAST and development tools to integrate security testing into pipelines. Design enterprise security controls, assess web applications against OWASP and related standards, and align security activities with NIST, FIPS, and FedRAMP requirements. The role supports a federal financial regulatory agency and requires U.S. citizenship and Public Trust suitability. The summary above was generated by AI

Status: Active - Immediate Need, * Citizenship: Must be a U.S. Citizen. No exceptions.

• Work Hours: Expected 8.5-hour work day (with a 30-minute break) within core hours approximately 7:30 AM - 4:30 PM US Eastern Time (ET), Monday through Friday; daily standup at 8:30 AM ET; schedule is flexible with advance notice.
• Work Location: Fully remote within the United States.
• Travel: Minimal., phia offers excellent benefits to enhance work-life balance, including the following:

• Medical Insurance

• Dental Insurance
• Vision Insurance
• Life Insurance
• Short Term & Long Term Disability
• 401k Retirement Savings Plan with Company Match
• Paid Holidays
• Paid Time Off (PTO)
• Tuition and Professional Development Assistance

phia LLC (“phia”) is a Northern Virginia based small business established in 2011 with focus areas of Cyber Intelligence, Cyber Defense, Threat Hunting, Intrusion Analysis & Incident Response, Vulnerability and Risk Management, Cyber Architecture & Engineering, Identity & Access Management, Cyber Policy & Strategy, Information Assurance, Compliance, and Communications, Personnel, and Facilities Security. phia also provides support functions such as: Program and Process Management, Strategic Communications and Engagement, and IT Infrastructure and Application DevSecOps that efficiently integrate our customer’s missions and objectives. phia supports various departments, agencies and offices within the U.S. Federal Government and private/commercial entities.