Job Type
Full-time
Description
MBL Technologies is seeking an experienced
Senior Application Security Engineer to support application security testing and vulnerability management efforts for a federal government customer. The successful candidate will perform application security assessments, execute Dynamic Application Security Testing (DAST), conduct Static Application Security Testing (SAST), and collaborate with development teams to identify and remediate security vulnerabilities.
The ideal candidate will possess extensive experience with Burp Enterprise for DAST scanning, Veracode for SAST analysis, Linux environments, and secure software development practices. This role plays a critical part in protecting enterprise applications and ensuring compliance with federal cybersecurity requirements.
This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.Key Responsibilities: - Perform Dynamic Application Security Testing (DAST) using Burp Suite Enterprise.
- Conduct Static Application Security Testing (SAST) utilizing Veracode and related security tools.
- Identify, analyze, document, and validate application vulnerabilities.
- Support secure software development lifecycle (SSDLC) initiatives.
- Work closely with development teams to recommend remediation strategies.
- Support enterprise-wide application security and vulnerability management programs.
- Assist with application security assessments of web applications, APIs, and supporting infrastructure.
- Develop security reports, findings, risk assessments, and executive summaries.
- Support continuous monitoring and compliance initiatives.
- Contribute to secure application architecture reviews and security design consultations.
Required Experience Skills & Qualifications: - 6+ years of experience with Information Technology, including cybersecurity or application security.
- 3+ years of experience with Java, Python, .NET, or C#.
- 3+ years of experience using Burp Suite DAST capabilities to perform Dynamic Application Security Testing.
- 2+ years of experience performing SAST using Veracode or comparable tools.
- 3+ years of experience designing and implementing enterprise-wide security controls.
- 3+ years of experience supporting Linux or UNIX environments.
- 2+ years of experience with Veracode integration and development environments.
- Experience securing enterprise web applications and frameworks.
- Knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25.
- Knowledge of federal security and compliance standards including NIST 800-53, FIPS, and FedRAMP.
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
- High School Diploma or GED.
Preferred Qualifications: - Experience with Interactive Application Security Testing (IAST) tools and methodologies.
- Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes): 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891
CORPORATE CITIZEN: MBL Technologies' vision is to make a positive difference - for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do - championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.
Benefits: MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.
