> Markdown version of [/jobs/ext/4628025-application-security-engineer-burp-suite-dast](https://www.wearedevelopers.com/jobs/ext/4628025-application-security-engineer-burp-suite-dast). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer (Burp Suite DAST) - **Company:** phia, LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $59,000 - $99,000 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Data Analysis, Application Portfolio Management, Audit Trail, Burp Suite, Business Software, C Sharp (Programming Language), Unix, Cyber Security, Linux, Eclipse (Software), Federal Information Processing Standards (FIPS), Identity and Access Management, JDeveloper, Python (Programming Language), Open Web Application Security, Microsoft PowerPoint, Runbook, Web Applications, Web Navigation, Web Services, Software Security, Veracode, Cyber Threat Analysis, Information Technology, Cybercrime, Enterprise Integration, Gsuite, Cyber Warfare, Data Pipelines, Static Application Security Testing, Dynamic Application Security Testing - **Published:** November 7, 2026 - **Apply:** https://www.builtincolorado.com/job/senior-application-security-engineer-burp-suite-dast/12125588?handler=ApplyRedirect ## About the Role * Enterprise DAST Practitioner: 3+ years running Burp Suite DAST / Burp Enterprise scans - not only Burp Suite Professional. * Veracode SAST User: 2+ years of Static Application Security Testing (SAST) experience, including Veracode and its pipeline integration. * Coder: 3+ years with Java, Python, .NET, or C#. * Linux-Comfortable: 3+ years in Linux/UNIX, including troubleshooting connectivity. * Controls Designer: You have designed enterprise-wide security controls. * Federal-Aware: Familiar with NIST 800-53, FIPS, or FedRAMP., * 6+ years of Information Technology experience, with experience in cybersecurity or application security. * 3+ years of experience with Java, Python, .NET, or C#. * 3+ years of experience using Burp Suite DAST to perform Dynamic Application Security Testing (DAST). * 2+ years of experience with Static Application Security Testing (SAST), using tools such as Veracode. * 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services. * 3+ years of experience with Linux or UNIX environments, including system navigation and troubleshooting basic website connectivity issues. * 2+ years of experience with Veracode and development environments such as Eclipse or JDeveloper, including pipeline development and integration. * Experience securing enterprise web applications and frameworks, including OWASP Top 10, CVSS, CWE, WASC, and SANS-25. * Knowledge of federal security and compliance standards, including NIST 800-53, FIPS, or FedRAMP. Preferred Skills * Experience with Interactive Application Security Testing (IAST) capabilities and tools. * Burp Suite DAST experience is pivotal in this position (required) Required Education + Clearance * Education: High school diploma or GED required; Bachelor's Degree preferred (Experience can be substituted for education). * Clearance: Public Trust / Suitability; applicants selected will be subject to a security investigation. ## Description At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is seeking a mission-driven Senior Application Security Engineer to act as a dedicated technical partner embedded within a federal financial regulatory agency's application security team. You will run the enterprise application security testing program - automated dynamic scanning with Burp Suite DAST (formerly Burp Suite Enterprise Edition) - integrate scanning into development pipelines, and work in Linux environments to keep scans healthy. This is a hands-on engineering seat for someone who has operated an enterprise Dynamic Application Security Testing (DAST) program, not only manual testing with Burp Suite Professional. What You'll Do * Run Enterprise DAST: Configure, schedule, and run dynamic application security scans with Burp Suite DAST (Enterprise), including authenticated scans across the application portfolio. * Integrate the Pipeline: Build and maintain scan integrations in development environments and CI/CD pipelines (e.g., Eclipse, JDeveloper, Veracode pipeline scanning). * Work in Linux: Navigate Linux/UNIX systems and troubleshoot basic website connectivity issues that affect scanning. * Design Security Controls: Design and implement enterprise-wide security controls for applications, systems, networks, and infrastructure services. * Apply the Standards: Map findings to OWASP Top 10, CVSS, CWE, WASC, and SANS-25, and align work to NIST 800-53, FIPS, and FedRAMP., Leads a team managing ADA and PWFA accommodation claims, ensuring accurate, timely, compliant claim adjudication and strong customer service. Responsibilities include coaching employees, managing performance and workloads, reviewing claim files and calls, identifying process improvements, administering concurrent disability and leave claims, mitigating risk, and communicating operational updates. The role requires disability or absence management expertise, sound judgment, knowledge of applicable regulations, and effective stakeholder collaboration. Top Skills: Microsoft Office Suite OneImaging Systems Administrator An Hour Ago Remote USA 60K-75K Annually Mid level 60K-75K Annually Mid level Healthtech Administer the company's SaaS, cloud, identity, endpoint, and security platforms. Manage access, SSO, MFA, SCIM, audit logging, vendor security, user lifecycle, device policies, and automation using scripts and APIs. Respond to security incidents, maintain compliance controls and runbooks, provide tier 1-2 IT support, manage hardware and assets, and document internal procedures. The role requires broad systems ownership across AWS, Google Workspace, Rippling, and numerous business applications. Top Skills: ActivecampaignAdobeAdvancedmdAircallAmazon Web Services (Aws)AnthropicAws CloudtrailAws GuarddutyAws IamAws Security HubBashBrazeDatabricksDatadogFigmaGoogle SecopsGoogle WorkspaceGreenhouseHipaaIntercomIntuneIso 27001JAMFKandjiLinearLinkedInLucidmacOSMdmMfaMongodb AtlasNordvpn TeamsNotionOpenai ApiPostmanPowershellPythonRest ApisRipplingSalesforceSAMLScimScribeSentrySoc 2SplunkSsoStytchTerraformTwilioVirtruWaystarWindowsZendeskZoom Liberty Mutual Insurance Technical Claims Specialist, Workers Compensation 2 Hours Ago Remote or Hybrid 75K-140K Annually Senior level 75K-140K Annually Senior level Artificial Intelligence * Fintech * Insurance * Marketing Tech * Software * Analytics Investigates, evaluates, reserves, negotiates, and resolves complex, high-severity workers compensation claims. Determines coverage and compensability, manages litigation and settlement activities, identifies fraud and subrogation opportunities, analyzes claims data, maintains reserves, advises management, and trains less experienced staff. Top Skills: ExcelMicrosoft Powerpoint What you need to know about the Colorado Tech Scene With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation. Key Facts About Colorado Tech * Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey) * Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3 * Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech * Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook) * Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures * Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute