[Hiring] Application Security Engineer @Polar IT Services

Role Description

Application Security Engineer for Booz Allen Hamilton, working with the SEC. This position is 100% remote with a contract duration of 12+ months. The interview process consists of 2 video interviews, and onboarding requires obtaining SEC Public Trust clearance (3-4 weeks).

• Focus on Burp and Veracode.
• 6+ years of Information Technology experience.
• 3+ years of experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
• 2+ years of experience with Java, Python, .NET, or C#.
• 3+ years of experience in designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
• Experience with Eclipse, JDeveloper, including pipeline development, or Visual Studio.
• Experience with securing enterprise web applications and knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS-25.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.
• Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic website connectivity issues.
• HS diploma or GED.

Qualifications

• Experience with Interactive Application Security Testing (IAST) capabilities and tools.
• Experience with HackerOne.
• Experience with Selenium.
• Experience writing bash scripts.
• Experience with OWASP ZAP or Burp Proxy.

Company Description